CVE-2020-3961

2020-06-1515:18:29

vmware

www.cve.org

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

VMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. A local user on the system where the software is installed may exploit this issue to run commands as any user.

CNA Affected

[
  {
    "product": "VMware Horizon Client for Windows",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Horizon Client for Windows (prior to 5.4.3)"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2020-0013.html