Privilege Escalation Issue in VMware NSX-T Due to RBAC Misconfiguration
CVE-2021-21981
7.8HIGH
Summary
VMware NSX-T has a vulnerability related to privilege escalation that stems from a misconfiguration in Role-Based Access Control (RBAC). This flaw allows attackers who have a local guest user account to escalate their privileges beyond the level of access they are assigned. By successfully exploiting this vulnerability, an attacker could potentially manipulate security roles, leading to unauthorized access within the NSX-T environment. This poses significant security risks, especially in environments with sensitive information.
Affected Version(s)
VMware NSX-T VMware NSX-T 3.1.1
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved