CVE-2015-0012
Microsoft System Center Virtual Machine Manager 2012 R2 Update Rollup 4 Privilege Escalation
Title source: llmDescription
Microsoft System Center Virtual Machine Manager (VMM) 2012 R2 Update Rollup 4 does not properly validate the roles of users, which allows local users to obtain server and virtual-machine administrative privileges by establishing a server session with Active Directory credentials, aka "Virtual Machine Manager Elevation of Privilege Vulnerability."
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1031726
Patch, Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-017
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/72473
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034652
VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/100428
Scores
EPSS
0.0164
EPSS Percentile
74.1%
Details
CWE
CWE-264
Status
published
Products (1)
microsoft/virtual_machine_manager
2012 r2_rollup4
Published
Feb 11, 2015
Tracked Since
Feb 18, 2026