high7.5
CVE-2021-22043
VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled.
Impact
VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled. A malicious actor with access to settingsd, may exploit this issue to escalate their privileges by writing arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Fusion | before 4.4 |
| Vmware | Esxi | Version 7.0 |