| Package | Affected versions | Patched versions |
|---|---|---|
| app volumes | ≥ 2.0, < 2.18.10≥ 4, < 2103 | 2.18.102103 |
| remote console | ≥ 12.0.0, < 12.0.1 | 12.0.1 |
| tools | ≥ 11.0.0, < 11.2.6 | 11.2.6 |
VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by placing a malicious file renamed as `openssl.cnf' in an unrestricted directory which would allow code to be executed with elevated privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free