vulnerability
VMware Horizon Client: CVE-2019-5543 VMware Horizon Client, VMRC and Workstation privilege escalation vulnerability (VMSA-2020-0004)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:N/C:C/I:C/A:C) | 2020-03-16 | 2022-05-25 | 2022-06-27 |
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
2020-03-16
Added
2022-05-25
Modified
2022-06-27
Description
For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware Workstation for Windows (15.x before 15.5.2) the folder containing configuration files for the VMware USB arbitration service was found to be writable by all users. A local user on the system where the software is installed may exploit this issue to run commands as any user.
Solution
vmware-horizon-client-upgrade-5_3_0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.