Lucene search

K
kasperskyKaspersky LabKLA61502
HistoryOct 20, 2023 - 12:00 a.m.

KLA61502 OSI vulnerability in VMWare Workstation

2023-10-2000:00:00
Kaspersky Lab
threats.kaspersky.com
17
vmware
vulnerability
information disclosure
update
vmsa-2023-0022
osi
cve-2023-34044

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0

Percentile

15.9%

Information disclosure vulnerability was found in VMWare Workstation. Malicious users can exploit this vulnerability to obtain sensitive information.

Original advisories

VMSA-2023-0022

Related products

VMware-Workstation

CVE list

CVE-2023-34044 high

Solution

Update to the latest version

Download VMware Workstation

Impacts

  • OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

  • SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

  • VMware Workstation 17.x earlier than 17.5.0

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0

Percentile

15.9%