PT-2019-1681 · Vmware · Vmware Workstation

Publicado 2019-03-14 · Atualizado 2020-08-24 · CVE-2019-5511

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 15.x before 15.0.3 VMware Workstation versions 14.x before 14.1.6

Description The issue is related to the handling of paths by VMware Workstation on Windows, which can be exploited to hijack the path to the VMX executable, potentially leading to elevation of privilege. This can be achieved by a non-administrator, allowing them to gain higher privileges.

Recommendations For versions 15.x before 15.0.3, update to version 15.0.3 or later. For versions 14.x before 14.1.6, update to version 14.1.6 or later.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

BDU:2019-01274

CVE-2019-5511

Produtos afetados

Vmware Workstation

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-5511 · Aviso do Fabricante
• https://vmware.com/security/advisories/VMSA-2019-0002.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-01274 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-5511 · Nota de Segurança