Main Vulnerability Database Vulnerabilities #VU349

Privilege escalation in VMware Identity Manager and Aria Automation (formerly vRealize Automation) - CVE-2016-5335

Published: August 27, 2016 / Updated: November 22, 2018

Vulnerability identifier: #VU349

CSH Severity: Low

CVSS v4: 9.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H]

CVE-ID: CVE-2016-5335

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to gain elevated privileges.

The vulnerability exists due to unknown error in Identity Manager and vRealize Automation. A local user can elevate his privileges to root.

Successful exploitation of this vulnerability will allow a local user to gain root privileges and complete control over vulnerable appliance.

VMware Identity Manager
Aria Automation (formerly vRealize Automation)

Apply patches for VMware Identity Manager 2.7 and vRealize Automation 7.1.