VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 16, 2022· Updated Jun 17, 2026

CVE-2021-22042

CVE-2021-22042

Description

VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. A malicious actor with privileges within the VMX process only, may be able to access settingsd service running as a high privileged user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • VMware/Esxiinferred5 versions
    (expand)+ 4 more
    • (no CPE)
    • cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:7.0:update_3:*:*:*:*:*:*
    • (no CPE)
  • VMware/Cloud Foundation
    cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
    Range: >=4.0,<4.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.