CVE-2019-5514: High severity vmware fusion vulnerability
VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker may exploit this issue by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine where VMware Tools is installed. This may further be exploited to execute commands on the guest machines.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this VMware Fusion vulnerability?
The vulnerability ID for this VMware Fusion vulnerability is CVE-2019-5514.
What is the severity level of CVE-2019-5514?
The severity level of CVE-2019-5514 is high.
What is the affected software for CVE-2019-5514?
The affected software for CVE-2019-5514 is VMware Fusion versions 11.x before 11.0.3.
How can an attacker exploit CVE-2019-5514?
An attacker can exploit CVE-2019-5514 by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine.
Are there any references for CVE-2019-5514?
Yes, references for CVE-2019-5514 can be found at the following links: [VMware Security Advisory 2019-0005](https://www.vmware.com/security/advisories/VMSA-2019-0005.html), [Packet Storm Security](http://packetstormsecurity.com/files/152290/VMware-Security-Advisory-2019-0005.html), and [SecurityFocus](http://www.securityfocus.com/bid/107637).