PT-2022-4410 · Vmware+10 · Vmware Tools+10
Published
2022-08-23
·
Updated
2025-08-13
·
CVE-2022-31676
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
VMware Tools versions 10.x.y through 12.0.0
Description
The issue is related to insufficient access control in VMware Tools, allowing a malicious actor with local non-administrative access to the Guest OS to escalate privileges as a root user in the virtual machine. This can potentially lead to sensitive data theft and user credential compromise. The vulnerability affects VMware Tools on both Windows and Linux platforms.
Recommendations
For versions 10.x.y through 12.0.0, update to version 12.1.0 or 10.3.25 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable components of VMware Tools until a patch is applied.
Fix
LPE
Improper Privilege Management
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Vmware Tools