8.8
CVE-2019-5511
- EPSS 0.04%
- Published 09.04.2019 20:30:20
- Last modified 21.11.2024 04:45:04
- Source security@vmware.com
- Teams watchlist Login
- Open Login
VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Successful exploitation of this issue may allow the path to the VMX executable, on a Windows host, to be hijacked by a non-administrator leading to elevation of privilege.
Data is provided by the National Vulnerability Database (NVD)
VMware ≫ Workstation Version >= 14.0.0 < 14.1.6
VMware ≫ Workstation Version >= 15.0.0 < 15.0.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.04% | 0.095 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2 | 6 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|