VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Administrator role for a vCenter Server Add Existing Disk action with a (1) -flat, (2) -rdm, or (3) -rdmp filename.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2013 0016 | — | Upgrade VMware ESX 4.1 to build number 1363503Upgrade VMware ESXi 5.5 to build number 1474528Upgrade VMware ESXi 4.1 to build number 1363503Upgrade VMware ESX 4.0 to build number 1335992Upgrade VMware ESXi 5.0 to build number 1311175Upgrade VMware ESXi 5.1 to build number 1312873Upgrade VMware ESXi 4.0 to build number 1335992 | Dec 23, 2013 | Dec 22, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub