PT-2020-4395

CVE-2020-3991

·

تاريخ النشر

2020-10-15

·

تاريخ التحديث

2020-10-23

الوصف من

CVSS 3.1
7.1
عالية
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions: VMware Horizon Client for Windows versions 5.x before 5.5.0
Description: The issue is related to a denial-of-service condition due to a file system access control problem during installation. It may allow an attacker to overwrite certain admin privileged files through a symbolic link attack, resulting in a denial-of-service condition on the machine where the client is installed. The vulnerability is also associated with insufficient input validation.
Recommendations: For versions 5.x before 5.5.0, update to version 5.5.0 or later to resolve the issue. As a temporary workaround, consider restricting file system access during installation to minimize the risk of exploitation.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾