VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Administrator role for a vCenter Server Add Existing Disk action with a (1) -flat, (2) -rdm, or (3) -rdmp filename.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2013 0016 | — | Upgrade VMware ESXi 4.0 to build number 1335992Upgrade VMware ESXi 5.0 to build number 1311175Upgrade VMware ESXi 5.1 to build number 1312873Upgrade VMware ESX 4.1 to build number 1363503Upgrade VMware ESXi 5.5 to build number 1474528Upgrade VMware ESXi 4.1 to build number 1363503Upgrade VMware ESX 4.0 to build number 1335992 | Dec 23, 2013 | Dec 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub