Summary
A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this to escalate privileges to root on the same VM
Products Potentially Affected
|
OS/Product
|
Exposure
|
|
ExtremeCloud IQ - Site Engine (XIQ-SE)
|
Yes
|
Repair Recommendations
ExtremeCloud IQ - Site Engine (XIQ-SE):
- Fixed in 25.11.10 or later
Please see the full security advisory article here for more details and future updates.