Not rated
CVE-2021-22042 VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets
Description
VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. A malicious actor with privileges within the VMX process only, may be able to access settingsd service running as a high privileged user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware ESXi and VMware Cloud Foundation | Versions not published |
Other CVEs of VMware ESXi and VMware Cloud Foundation
The 5 CVEs of VMware ESXi and VMware Cloud Foundation →
CVE-2021-22050
ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy
Not rated
CVE-2021-22043
VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are…
Not rated
CVE-2021-21995
OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue
Not rated
CVE-2021-21994
SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability
Not rated