CVE-2021-21981
Last modified
CVE-2021-21981 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role assignment. Successful exploitation of this issue may allow attackers with local guest user account to assign privileges higher than their own permission level.. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role assignment. Successful exploitation of this issue may allow attackers with local guest user account to assign privileges higher than their own permission level.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Vmware Nsx-T Data Center | 3.1.1 |
References
- https://www.vmware.com/security/advisories/VMSA-2021-0006.htmlPatch, Vendor Advisory
- https://www.vmware.com/security/advisories/VMSA-2021-0006.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-21981?
How severe is CVE-2021-21981?
How do I fix CVE-2021-21981?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-21975Server Side Request Forgery in vRealize Operations Manager A…7.5
- CVE-2021-21976vSphere Replication 8.3.x prior to 8.3.1.2, 8.2.x prior to 8…7.2
- CVE-2021-21978VMware View Planner 4.x prior to 4.6 Security Patch 1 contai…9.8
- CVE-2021-21979In Bitnami Containers, all Laravel container versions prior …7.3
- CVE-2021-2198Vulnerability in the Oracle Knowledge Management product of …8.2
- CVE-2021-21980The vSphere Web Client (FLEX/Flash) contains an unauthorized…7.5
- CVE-2021-21982VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 …9.1
- CVE-2021-21983Arbitrary file write vulnerability in vRealize Operations Ma…6.5
- CVE-2021-21984VMware vRealize Business for Cloud 7.x prior to 7.6.0 contai…9.8
- CVE-2021-21985The vSphere Client (HTML5) contains a remote code execution …9.8
- CVE-2021-21986The vSphere Client (HTML5) contains a vulnerability in a vSp…9.8
- CVE-2021-21987VMware Workstation (16.x prior to 16.1.2) and Horizon Client…6.5
Are you affected by CVE-2021-21981?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST