Privilege Escalation Vulnerability in VMware Products
CVE-2020-3974

7.8HIGH

Key Information:

Vendor
Vmware
Status
Vmware Fusion, Vmware Remote Console For Mac And Horizon Client For Mac
Vendor
CVE Published:
10 July 2020

Summary

VMware Fusion, VMware Remote Console for Mac, and Horizon Client for Mac are exposed to a privilege escalation risk due to inadequate validation of XPC Clients. This flaw allows attackers with standard user permissions to elevate their privileges to root, thereby gaining unauthorized access to sensitive system operations. It is crucial for users to apply the necessary updates to mitigate this risk.

Affected Version(s)

VMware Fusion, VMware Remote Console for Mac and Horizon Client for Mac VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for Mac (5.x and prior before 5.4.3)

References

https://www.vmware.com/security/advisories/VMSA-2020-0017...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.