Horizon Alert
Summary of the vulnerability and why it matters
VMware Fusion, VMware Remote Console for Mac, and Horizon Client for Mac are affected by a privilege escalation vulnerability. This flaw stems from the improper handling of setuid binaries. Successful exploitation could enable an attacker with standard user privileges to gain administrative root access on the affected system.
- Vulnerable VMware applications
- Improper use of setuid binaries
- Attacker gains root access
Attack Path
How an attacker could exploit the issue
VMware Fusion, VMware Remote Console for Mac, and Horizon Client for Mac are susceptible to privilege escalation. Attackers with normal user privileges on an affected system can exploit this vulnerability. Successful exploitation allows an attacker to gain root-level control of the system.
- Local user access required.
- Attacker executes a malicious program.
- Attacker gains root privileges.
Live Threat
Current exploitation, exposure, and threat context
The vulnerability affects VMware Fusion, VMware Remote Console for Mac, and Horizon Client for Mac. Attackers with normal user privileges could potentially escalate their access to root on affected systems. This could lead to a significant compromise of the affected machine.
- Likely attacker skill level: Moderate.
- Required access or conditions: Local user access.
- Business risk or urgency: High.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
This vulnerability in VMware Fusion, VMware Remote Console for Mac, and Horizon Client for Mac allows an attacker with normal user privileges to escalate their privileges to root. This could lead to unauthorized access and control over the affected system. The risk is classified as internal, requiring local access for exploitation.
- Identify affected assets.
- Isolate or reduce exposure.
- Apply vendor fix and validate.
