CVE-2021-21999
VMware Workstation Tools Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by placing a malicious file renamed as `openssl.cnf' in an unrestricted directory which would allow code to be executed with elevated privileges.
VMware Tools para Windows (versiones 11.x.y anteriores a 11.2.6), VMware Remote Console para Windows (versiones 12.x anteriores a 12.0.1) , VMware App Volumes (versiones 2.x anteriores a 2.18.10 y versiones 4 anteriores a 2103) contienen una vulnerabilidad de escalada de privilegios local. Un atacante con acceso normal a una máquina virtual puede explotar este problema al colocar un archivo malicioso renombrado como "openssl.cnf" en un directorio no restringido que permitiría ejecutar código con privilegios elevados
This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the VGAuthService service. The issue results from the lack of proper validation of a user-supplied OpenSSL configuration file prior to using it. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-01-04 CVE Reserved
- 2021-06-23 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-427: Uncontrolled Search Path Element
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-21-754 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.vmware.com/security/advisories/VMSA-2021-0013.html | 2022-07-12 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Vmware Search vendor "Vmware" | App Volumes Search vendor "Vmware" for product "App Volumes" | >= 2.0 < 2.18.10 Search vendor "Vmware" for product "App Volumes" and version " >= 2.0 < 2.18.10" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | App Volumes Search vendor "Vmware" for product "App Volumes" | >= 4 < 2103 Search vendor "Vmware" for product "App Volumes" and version " >= 4 < 2103" | - |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Remote Console Search vendor "Vmware" for product "Remote Console" | >= 12.0.0 < 12.0.1 Search vendor "Vmware" for product "Remote Console" and version " >= 12.0.0 < 12.0.1" | windows |
Affected
| ||||||
| Vmware Search vendor "Vmware" | Tools Search vendor "Vmware" for product "Tools" | >= 11.0.0 < 11.2.6 Search vendor "Vmware" for product "Tools" and version " >= 11.0.0 < 11.2.6" | windows |
Affected
| ||||||