CVE-2017-4921

published 2017-08-01

CVE-2017-4921: VMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that occurs due to the use of LD_LIBRARY_PATH variable in an unsafe…

high 8.8 CVSS 3.0

AV N AC L PR L UI N S U C H I H A H

VMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that occurs due to the use of LD_LIBRARY_PATH variable in an unsafe manner. Successful exploitation of this issue may allow unprivileged host users to load a shared library that may lead to privilege escalation.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
vmware	vcenter_server	—	—
vmware	vmware_tools	—	—
vmware	vmware_vcenter_server	—	—
vmware	vsphere	—	—