Non notée
CVE-2021-22043 VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are…
Description
VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled. A malicious actor with access to settingsd, may exploit this issue to escalate their privileges by writing arbitrary files.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| VMware ESXi and VMware Cloud Foundation | Versions non publiées |
Autres CVE de VMware ESXi and VMware Cloud Foundation
Les 5 CVE de VMware ESXi and VMware Cloud Foundation →
CVE-2021-22050
ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy
Non notée
CVE-2021-22042
VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets
Non notée
CVE-2021-21995
OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue
Non notée
CVE-2021-21994
SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability
Non notée