Aller au contenu
en Se connecter
7.6 Élevée

CVE-2025-41246 VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access…

Description

VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs. Successful exploitation requires knowledge of credentials of the targeted VMs and vCenter or ESX.

Produits et versions touchés

Produit Versions touchées Corrigé en
Tools 13 13.x.x.x → < 13.0.5.0 13.0.5.0
Tools 12 12.x.x → < 12.5.4 12.5.4
Tools 11.x.x Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Tools

Les 2 CVE de Tools →
CVE-2025-41239 VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage… 7.1 Élevée
Suivre cette CVE