Skip to content
OpenAdvisories
Unscored CVE-2020-3948 EUVD-2020-25213GHSA-8vx8-8442-ph7f

Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vul…

Published Mar 16, 2020 · Updated Aug 4, 2024 · Assigned by vmware

Description

Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vulnerability due to improper file permissions in Cortado Thinprint. Local attackers with non-administrative access to a Linux guest VM with virtual printing enabled may exploit this issue to elevate their privileges to root on the same guest VM.

Affected products

VendorProductAffectedFixed
VMware Workstation 15.x before 15.5.2 —
VMware Fusion 11.x before 11.5.2 —

References