CVE-2019-5514
High
Description
VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker may exploit this issue by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine where VMware Tools is installed. This may further be exploited to execute commands on the guest machines.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Vmware Fusion
PublishedApr 1, 2019
First seenApr 1, 2019
How to fix
Update
- vmware fusion11.0.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware fusion | 11.0.0 ≤ v < 11.0.3 | 11.0.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.