← Volver a CVEs

CVE-2021-22000

HIGH

7.8

Descripcion

VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs. A malicious actor with non-administrative privileges may exploit this vulnerability to elevate privileges to administrator level on the Windows operating system having VMware ThinApp installed on it.

Detalles CVE

Puntuacion CVSS v3.17.8

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado7/13/2021

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

vmware:thinapp

Debilidades (CWE)

CWE-427

Referencias

http://packetstormsecurity.com/files/163521/VMware-ThinApp-DLL-Hijacking.html(security@vmware.com)

http://seclists.org/fulldisclosure/2021/Jul/35(security@vmware.com)

https://www.vmware.com/security/advisories/VMSA-2021-0015.html(security@vmware.com)

http://packetstormsecurity.com/files/163521/VMware-ThinApp-DLL-Hijacking.html(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2021/Jul/35(af854a3a-2127-422b-91ae-364da2661108)

https://www.vmware.com/security/advisories/VMSA-2021-0015.html(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.