CVE-2021-21981: High severity vmware nsx-t data center vulnerability

Published Apr 19, 2021

Updated

VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role assignment. Successful exploitation of this issue may allow attackers with local guest user account to assign privileges higher than their own permission level.

Affected Software

2 affected components

VMware Nsx-t Data Center=3.1.1

Broadcom Vmware Nsx-t Data Center=3.1.1

Remediation

Patch Available

https://www.vmware.com/security/advisories/VMSA-2021-0006.html

Event History

Apr 19, 2021

CVE Published

via MITRE·02:37 PM

Data Sourced

via MITRE·02:37 PM

DescriptionWeakness

Data Sourced

via NVD·03:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2021-21981?

CVE-2021-21981 is a privilege escalation vulnerability in VMware NSX-T due to an issue with RBAC role assignment.

How does the vulnerability in VMware NSX-T occur?

The vulnerability in VMware NSX-T occurs due to an issue with RBAC role assignment, allowing attackers to assign privileges higher than their own permission level.

What is the severity of CVE-2021-21981?

The severity of CVE-2021-21981 is high with a CVSS score of 7.8.

Is VMware NSX-T version 3.1.1 affected by CVE-2021-21981?

Yes, VMware NSX-T version 3.1.1 is affected by CVE-2021-21981.

How can I mitigate the vulnerability in VMware NSX-T?

To mitigate the vulnerability in VMware NSX-T, update to a version that includes the fix provided by VMware.