Privilege Escalation Issue in VMware NSX-T Due to RBAC Misconfiguration

CVE-2021-21981

What is CVE-2021-21981?

VMware NSX-T has a vulnerability related to privilege escalation that stems from a misconfiguration in Role-Based Access Control (RBAC). This flaw allows attackers who have a local guest user account to escalate their privileges beyond the level of access they are assigned. By successfully exploiting this vulnerability, an attacker could potentially manipulate security roles, leading to unauthorized access within the NSX-T environment. This poses significant security risks, especially in environments with sensitive information.

References