vulnerability

VMware Horizon Client: CVE-2019-5543 VMware Horizon Client, VMRC and Workstation privilege escalation vulnerability (VMSA-2020-0004)

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
2020-03-16
Added
2022-05-25
Modified
2022-06-27

Description

For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware Workstation for Windows (15.x before 15.5.2) the folder containing configuration files for the VMware USB arbitration service was found to be writable by all users. A local user on the system where the software is installed may exploit this issue to run commands as any user.

Solution

vmware-horizon-client-upgrade-5_3_0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.