Vulnerability · Published Sep 16, 2020 · Assigned by vmware
CVE-2020-3980
Medium 6.7
In plain English
A medium-severity security flaw in VMware Fusion. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS NVD)6.7Medium
Exploit odds (30 days)0.3%top 78.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user privileges may exploit this issue to trick an admin user into executing malicious code on the system where Fusion is installed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | VMware Fusion | VMware Fusion (11.x) |
References
- https://www.vmware.com/security/advisories/VMSA-2020-0020.html x_refsource_MISC