CVE-2021-22048

The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism

published November 10, 2021

CVSS
—
EPSS
10%
Percentile
95.7
In the wild
Unconfirmed
What it is

The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A malicious actor with non-administrative access to vCenter Server may exploit this issue to elevate privileges to a higher privileged group.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10296 · 95.7th percentile
Published
2021-11-10T17:50Z
EPSS history
Timeline
  • 10 NOV 17:50Z
    The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism
    cvelistv5