CVE-2018-6978: High severity vmware vrealize operations vulnerability
vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vulnerability due to improper permissions of support scripts. Admin user of the vROps application with shell access may exploit this issue to elevate the privileges to root on a vROps machine. Note: the admin user (non-sudoer) should not be confused with root of the vROps machine.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for vRealize Operations?
The vulnerability ID for vRealize Operations is CVE-2018-6978.
What is the severity of CVE-2018-6978?
The severity of CVE-2018-6978 is high.
What is the affected software for CVE-2018-6978?
The affected software for CVE-2018-6978 is VMware vRealize Operations 7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837, and 6.6.x before 6.6.1.11286876.
What is the description of CVE-2018-6978?
CVE-2018-6978 is a local privilege escalation vulnerability in vRealize Operations due to improper permissions of support scripts, which allows an admin user with shell access to elevate their privileges.
Are there any references for CVE-2018-6978?
Yes, you can find the references for CVE-2018-6978 at the following links: [Security Focus](http://www.securityfocus.com/bid/106242) and [VMware Security Advisories](https://www.vmware.com/security/advisories/VMSA-2018-0031.html).