CVE-2020-3980 - VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path

Back Back to CVE browser

MEDIUM

VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path

Published Sep 16, 2020

6.7

MEDIUM

CVSS 3.1

EPSS 0.29%

Description

VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user privileges may exploit this issue to trick an admin user into executing malicious code on the system where Fusion is installed.

Affected products

Vendor n/a Product VMware Fusion Default
n/a
- Version
  VMware Fusion (11.x)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

VMware Fusion

n/a

Version	Status	Constraints
VMware Fusion (11.x)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25245
Advisory
https://www.vmware.com/security/advisories/VMSA-2020-0020.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25245		Advisory
https://www.vmware.com/security/advisories/VMSA-2020-0020.html		x_refsource_MISCVendor Advisory