First published: Wed Aug 31 2016(Updated: )
VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
VMware Workspace ONE Access and Identity Manager | >=2.0<2.7 | |
VMware vRealize Automation | >=7.0<7.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-5335 is considered a critical vulnerability due to its potential to allow local users to gain root access.
To fix CVE-2016-5335, upgrade VMware Identity Manager to version 2.7 or later and vRealize Automation to version 7.1 or later.
CVE-2016-5335 affects local users on VMware Identity Manager versions prior to 2.7 and vRealize Automation versions prior to 7.1.
The risks of CVE-2016-5335 include unauthorized root access, which could lead to full system compromise.
CVE-2016-5335 was published in June 2016 as part of VMware's security advisory.