Description
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Affected products
- VMware / VMware tools12.2.5 – 12.2.5
References
- VENDOR_ADVISORYhttps://www.vmware.com/security/advisories/VMSA-2023-0013.html
- MISChttps://security.netapp.com/advisory/ntap-20230725-0001/
- MAILING_LISThttps://lists.debian.org/debian-lts-announce/2023/08/msg00020.html
- VENDOR_ADVISORYhttps://www.debian.org/security/2023/dsa-5493
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZJM6HDRQYS74JA7YNKQBFH2XSZ52HEWH/
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NVKQ6Y2JFJRWPFOZUOTFO3H27BK5GGOG/
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TJNJMD67QIT6LXLKWSHFM47DCLRSMT6W/
- MAILING_LISThttp://www.openwall.com/lists/oss-security/2023/10/16/2
- MAILING_LISThttp://www.openwall.com/lists/oss-security/2023/10/16/11
Updated 6m ago · 8 sources