writeups.xyz / From Shared Dash to Root Bash :: Pre-Authenticated RCE in VMWare vRealize Operations Manager

Submitter : c2a

Date: 9 August 2022

Bounty : undisclosed

Vulnerabilities :

• Authentication Bypass
• Information Disclosure
• Local Privilege Escalation

Programs :

• VMware

Authors :

• Steven Seeley (@Steventseeley)

Link :
https://srcincite.io/blog/2022/08/09/from-shared-dash-to-root-bash-pre-authenticated-rce-in-vmware-vrealize-operations-manager.html