Medium severity · published Dec 18, 2018
CVE-2018-6978
vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vulnerability due to improper…
6.7
CVSS
0.3%
EPSS
No
On KEV
Description
vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vulnerability due to improper permissions of support scripts. Admin user of the vROps application with shell access may exploit this issue to elevate the privileges to root on a vROps machine. Note: the admin user (non-sudoer) should not be confused with root of the vROps machine.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VO
Vrealize Operations · Vmware
6.6.0 before 6.6.1.11286876; 6.7.0 before 6.7.0.11286837; 7.0.0 before 7.0.0.11287810 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-6978
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-6978
Third Party Advisory
http://www.securityfocus.com/bid/106242
Patch
https://www.vmware.com/security/advisories/VMSA-2018-0031.html
More from Vrealize Operations
10.0
CVE-2016-7457
VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual machines, via unspecified vectors
9.8
CVE-2020-3943
vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configured
8.8
CVE-2023-20877
VMware Aria Operations contains a privilege escalation vulnerability
8.8
CVE-2023-20856
VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability
8.8
CVE-2022-31673
VMware vRealize Operations contains an information disclosure vulnerability