CVE-2024-37081

This repository contains a functional Python-based PoC for CVE-2024-37081, which exploits a misconfiguration in VMware vCenter's sudoers file to execute arbitrary commands with root privileges via environment variable manipulation.

The repository claims to detail a local privilege escalation vulnerability in VMware vCenter Server due to sudo misconfiguration but provides no actual exploit code. Instead, it redirects users to an external PDF for details, which is a common tactic in suspicious repositories.

The repository contains only a vague README with no technical details or exploit code, claiming a 'modified' PoC for CVE-2024-37081 without providing any substance. It appears to be a social engineering lure.

This Metasploit module exploits a sudo misconfiguration in VMware vCenter Server to achieve local privilege escalation (LPE) by leveraging environment variable manipulation (PYTHONPATH, VMWARE_PYTHON_PATH, or VMWARE_PYTHON_BIN) to execute arbitrary payloads as root.