Local Privilege Escalation in VMware vCenter Server Appliance via sudo Misconfiguration

This repository provides a proof-of-concept (PoC) exploit for CVE-2024-37081, a local privilege escalation vulnerability in VMware vCenter due to improper configuration of the /etc/sudoers file. The repository contains two files: a README.md with detailed vulnerability and usage information, and poc.py, a Python script that demonstrates the exploit. The script creates a malicious Python module in /tmp/malicious/__init__.py, sets environment variables (PYTHONPATH, VMWARE_PYTHON_PATH, VMWARE_PYTHON_BIN) to point to malicious code or scripts, and uses sudo to execute commands as privileged users (operator, pod, admin, vpxd). It attempts to execute arbitrary code as root (demonstrated by writing the output of 'id' to /tmp/pwned) and to read sensitive files like /etc/shadow. The exploit is a local privilege escalation PoC and requires sudo access and a vulnerable sudoers configuration. No network endpoints are involved; all actions are performed locally on the target system.