Description
VMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that occurs due to the use of LD_LIBRARY_PATH variable in an unsafe manner. Successful exploitation of this issue may allow unprivileged host users to load a shared library that may lead to privilege escalation.
References
- https://www.vmware.com/security/advisories/VMSA-2017-0013.html
- 1039013 vdb-entry
- 100006 vdb-entry