Description
Ruby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail.
References
- 1030436 vdb-entry
- 58823 third-party-advisory
- http://zerodayinitiative.com/advisories/ZDI-14-159/
- 67756 vdb-entry