CVE-2015-0012

MEDIUM 6.9CVE-2015-0012 · Published 11/02/2015 · updated 17/06/2026

In short

CVE-2015-0012 is a MEDIUM (CVSS 6.9) vulnerability affecting virtual machine manager (microsoft).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
virtual machine manager microsoft	`= 2012`	No fix yet

Description

Microsoft System Center Virtual Machine Manager (VMM) 2012 R2 Update Rollup 4 does not properly validate the roles of users, which allows local users to obtain server and virtual-machine administrative privileges by establishing a server session with Active Directory credentials, aka "Virtual Machine Manager Elevation of Privilege Vulnerability."

References

securityfocus.com/bid/72473 · Third Party Advisory
securitytracker.com/id/1031726 · Third Party Advisory
securitytracker.com/id/1034652 · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-017 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/100428 · VDB Entry

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free