PT-2019-1681 · Vmware · Vmware Workstation

Published 2019-03-14 · Updated 2020-08-24 · CVE-2019-5511

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 15.x before 15.0.3 VMware Workstation versions 14.x before 14.1.6

Description The issue is related to the handling of paths by VMware Workstation on Windows, which can be exploited to hijack the path to the VMX executable, potentially leading to elevation of privilege. This can be achieved by a non-administrator, allowing them to gain higher privileges.

Recommendations For versions 15.x before 15.0.3, update to version 15.0.3 or later. For versions 14.x before 14.1.6, update to version 14.1.6 or later.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2019-01274

CVE-2019-5511

Affected Products

Vmware Workstation

References · 4

• https://osv.dev/vulnerability/CVE-2019-5511 · Vendor Advisory
• https://vmware.com/security/advisories/VMSA-2019-0002.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01274 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-5511 · Security Note