Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-37081

No fix known EPSS 5%CVSS 7.8

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.

Published 2024-06-18 · CVE record · OSV

Products: vmware cloud_foundation, VMware vCenter Server