CVE-2021-22043

VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled

published February 16, 2022

CVSS
—
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled. A malicious actor with access to settingsd, may exploit this issue to escalate their privileges by writing arbitrary files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01052 · 64.1th percentile
Published
2022-02-16T16:37Z
EPSS history
Timeline
  • 16 FEB 16:37Z
    VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled
    cvelistv5