CVE-2024-37081
HIGHDescription
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.
Is your site exposed to CVE-2024-37081?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | vcenter_server |
| vmware | cloud_foundation |
References
Frequently Asked Questions
What is CVE-2024-37081? +
How severe is CVE-2024-37081? +
What products are affected by CVE-2024-37081? +
How do I check if I'm vulnerable to CVE-2024-37081? +
Related Vulnerabilities
Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access …
The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access …
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to …
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to …
In Spring Cloud Data Flow versions prior to 2.11.4, a malicious user who has access to the Skipper server api …
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with …