VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
VCF operations
Vendor
VMware
Product
VCF operations
Platforms
Unknown
Default status
unaffected
VCF operations · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
9.0.x
affected
commercial
9.0.1.0
Unavailable
None listed
VMware tools
Vendor
VMware
Product
VMware tools
Platforms
Unknown
Default status
unaffected
VMware tools · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
13.x.x.x
affected
commercial
13.0.5.0
Unavailable
None listed
12.5.x
affected
commercial
12.5.4
Unavailable
None listed
VMware Aria Operations
Vendor
VMware
Product
VMware Aria Operations
Platforms
Unknown
Default status
unaffected
VMware Aria Operations · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.18.x
affected
commercial
8.18.5
Unavailable
None listed
VMware Cloud Foundation
Vendor
VMware
Product
VMware Cloud Foundation
Platforms
Unknown
Default status
unaffected
VMware Cloud Foundation · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.x
affected
commercial
8.18.5
Unavailable
None listed
4.x
affected
commercial
8.18.5
Unavailable
None listed
VMware Telco Cloud Platform
Vendor
VMware
Product
VMware Telco Cloud Platform
Platforms
Unknown
Default status
unaffected
VMware Telco Cloud Platform · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.x
affected
commercial
8.18.5
Unavailable
None listed
4.x
affected
commercial
8.18.5
Unavailable
None listed
VMware Telco Cloud Infrastructure
Vendor
VMware
Product
VMware Telco Cloud Infrastructure
Platforms
Unknown
Default status
unaffected
VMware Telco Cloud Infrastructure · Scoped product and version facts