Privilege Escalation Issue in VMware NSX-T Due to RBAC Misconfiguration
CVE-2021-21981

7.8HIGH

Key Information:

Vendor
Vmware
Vendor
CVE Published:
19 April 2021

Summary

VMware NSX-T has a vulnerability related to privilege escalation that stems from a misconfiguration in Role-Based Access Control (RBAC). This flaw allows attackers who have a local guest user account to escalate their privileges beyond the level of access they are assigned. By successfully exploiting this vulnerability, an attacker could potentially manipulate security roles, leading to unauthorized access within the NSX-T environment. This poses significant security risks, especially in environments with sensitive information.

Affected Version(s)

VMware NSX-T VMware NSX-T 3.1.1

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.