.. / CVE-2024-37081

• LPE
• PoC
• Linux

Exploit for VMware vCenter Server (7.0, 8.0), VMware Cloud Foundation (4.x, 5.x) - Local Privilege Escalation (CVE-2024-37081)

Description:

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.

Affected Products:

• VMware vCenter Server (fixed in 7.0 U3r)
• VMware vCenter Server 8.0 (fixed in 8.0 U2d)
• VMware Cloud Foundation 4.x (fixed in KB88287)
• VMware Cloud Foundation 5.x (fixed in KB88287)

References: