VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware Tools folder, which allows guest OS users to gain guest OS privileges via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vmsa 2012 0007 | — | Upgrade VMware ESX 3.5 to build number 604481Upgrade VMware ESXi 3.5 to build number 604481Upgrade VMware ESXi 4.1 to build number 582267Upgrade VMware ESXi 4.0 to build number 660575Upgrade VMware ESX 4.1 to build number 582267Upgrade VMware ESX 4.0 to build number 660575Upgrade VMware ESXi 5.0 to build number 608089 | Aug 17, 2012 | Apr 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub