CVEvulnerability
CVE-2013-5973
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary files by leveraging the Virtual Machine Power User or Resource Pool Administrator role for a vCenter Server Add Existing Disk action with a (1) -flat, (2) -rdm, or (3) -rdmp filename.
Affected configurations
• vmware esx 4.0
• vmware esx 4.1
• vmware esxi 4.0
• vmware esxi 4.1
• vmware esxi 5.0
• vmware esxi 5.1
Related
Weakness · not in database (1)
References
- http://jvn.jp/en/jp/JVN13154935/index.html jvn.jp
- http://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000123.html jvndb.jvn.jp
- http://osvdb.org/101387 osvdb.org
- http://www.securityfocus.com/archive/1/530482/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/64491 www.securityfocus.com
- http://www.securitytracker.com/id/1029529 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2013-0016.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89938 exchange.xforce.ibmcloud.com
- http://jvn.jp/en/jp/JVN13154935/index.html jvn.jp
- http://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000123.html jvndb.jvn.jp
- http://osvdb.org/101387 osvdb.org
- http://www.securityfocus.com/archive/1/530482/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/64491 www.securityfocus.com
- http://www.securitytracker.com/id/1029529 www.securitytracker.com
- http://www.vmware.com/security/advisories/VMSA-2013-0016.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89938 exchange.xforce.ibmcloud.com