8.8
CVE-2019-5511
- EPSS 0.04%
- Veröffentlicht 09.04.2019 20:30:20
- Zuletzt bearbeitet 21.11.2024 04:45:04
- Quelle security@vmware.com
- Teams Watchlist Login
- Unerledigt Login
VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Successful exploitation of this issue may allow the path to the VMX executable, on a Windows host, to be hijacked by a non-administrator leading to elevation of privilege.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Workstation Version >= 14.0.0 < 14.1.6
VMware ≫ Workstation Version >= 15.0.0 < 15.0.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.04% | 0.095 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2 | 6 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|