Vulnerability in Microsoft Virtual Machine Manager
CVE-2015-0012
Microsoft System Center Virtual Machine Manager (VMM) 2012 R2 Update Rollup 4 does not properly validate the roles of users, which allows local users to obtain server and virtual-machine administrative privileges by establishing a server session with Active Directory credentials, aka "Virtual Machine Manager Elevation of Privilege Vulnerability."
EPSS: 0.016 (74.0th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Virtual_machine_manager — versions 2012
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (VDB Entry, vdb-entry, x_refsource_XF)
- secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (x_refsource_MS, vendor-advisory, Patch, Vendor Advisory)
- secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)