Description
This module bypasses LDAP authentication in VMware vCenter Server's vmdir service to add an arbitrary administrator user. Version 6.7 prior to the 6.7U3f update is vulnerable, only if upgraded from a previous release line, such as 6.0 or 6.5. Note that it is also possible to provide a bind username and password to authenticate if the target is not vulnerable. It will add an arbitrary administrator user the same way.
Module options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use auxiliary/admin/ldap/vmware/vcenter_vmdir_auth_bypassmsf undefined(vcenter_vmdir_auth_bypass) > show actions ...actions...msf undefined(vcenter_vmdir_auth_bypass) > set ACTION < action-name >msf undefined(vcenter_vmdir_auth_bypass) > show options ...show and set options...msf undefined(vcenter_vmdir_auth_bypass) > runPrioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub