PT-2014-5732
CVE-2014-4200
·
تاريخ النشر
2014-08-28
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.7
متوسطةالمقاييسAV:L/AC:M/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
VMware Tools versions prior to the version that fixes the issue in VMware Workstation through 10.0.3
Description
The issue allows local users to obtain sensitive information by extracting files from the vm-support archive due to the use of 0644 permissions.
Recommendations
For versions prior to the fixed version, consider changing the permissions of the vm-support archive to prevent unauthorized access until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾