3.9
Faible
CVE-2023-20867 VMware Tools Authentication Bypass Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-287
Description
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| VMware Tools 12.2 | premières → < 12.2.5 | 12.2.5 |
Autres CVE de VMware Tools
Les 4 CVE de VMware Tools →
CVE-2025-41244
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability
7.8
Élevée
CVE-2018-6969
VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS
Non notée
CVE-2015-5191
VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths…
Non notée