CVE Database
/

CVE-2020-3948

Back to search

CVE-2020-3948

Published: Mar 16, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vulnerability due to improper file permissions in Cortado Thinprint. Local attackers with non-administrative access to a Linux guest VM with virtual printing enabled may exploit this issue to elevate their privileges to root on the same guest VM.

VendorProductVersions

VMware

Workstation

affected
15.x before 15.5.2

VMware

Fusion

affected
11.x before 11.5.2

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now