CVE-2025-2903
Privilege Chaining in Delphix
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Privilege Chaining in Delphix
An attacker with knowledge of creating user accounts during VM deployment on Google Cloud Platform (GCP) using the OS Login feature, can login via SSH gaining command-line control of the operating system. This allows an attacker to gain access to sensitive data stored on the VM, install malicious software, and disrupt or disable the functionality of the VM.
Reserved 2025-03-28 | Published 2025-04-17 | Updated 2025-04-17 | Assigner PerforceCWE-267 Privilege Defined With Unsafe Actions
portal.perforce.com/s/detail/a91PA000001Sed3YAC
Support options
