CVE-2022-22962
High
Description
VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the default shared folder location due to a vulnerable symbolic link. Successful exploitation can result in linking to a root owned file.
SeverityHigh
CVSS7.8
Exploit probability23. percentile0.3%
Product
Vmware Horizon
PublishedApr 11, 2022
First seenApr 11, 2022
How to fix
Update
- vmware horizon2203 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware horizon | v < 2203 | 2203 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.