CVE-2021-22048: The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A malicious actor with non-administrative access to vCenter...

Summary

The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A malicious actor with non-administrative access to vCenter Server may exploit this issue to elevate privileges to a higher privileged group.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
vmware	cloud_foundation	>= 3.0, <= 3.10.2.2 >= 4.0, <= 4.1.0.1 `cpe:2.3:a:vmware:cloud_foundation::::::::`
vmware	vcenter_server	6.5 6.7 7.0 `cpe:2.3:a:vmware:vcenter_server:6.5:-::::::`

Original advisory text

The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A malicious actor with non-administrative access to vCenter...

The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A malicious actor with non-administrative access to vCenter Server may exploit this issue to elevate privileges to a higher privileged group.

References

http://packetstormsecurity.com/files/167733/VMware-Security-Advisory-2022-0025.2... Release Notes Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/167795/VMware-Security-Advisory-2021-0025.3... Release Notes Third Party Advisory VDB Entry
https://www.vmware.com/security/advisories/VMSA-2021-0025.html Patch Vendor Advisory