CVE-2019-5543: High severity vmware horizon vulnerability
For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware Workstation for Windows (15.x before 15.5.2) the folder containing configuration files for the VMware USB arbitration service was found to be writable by all users. A local user on the system where the software is installed may exploit this issue to run commands as any user.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-5543?
CVE-2019-5543 is a vulnerability found in VMware products that allows unauthorized modification of configuration files.
Which products are affected by CVE-2019-5543?
VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), and VMware Workstation for Windows (15.x before 15.5.2) are affected by CVE-2019-5543.
What is the severity of CVE-2019-5543?
CVE-2019-5543 has a severity rating of 7.8 (high).
How can the vulnerability CVE-2019-5543 be exploited?
CVE-2019-5543 can be exploited by unauthorized users to modify configuration files for the VMware USB arbitration service.
How can I fix CVE-2019-5543?
To fix CVE-2019-5543, update VMware Horizon Client for Windows to version 5.3.0 or later, VMware Remote Console for Windows to version 11.0.0 or later, and VMware Workstation for Windows to version 15.5.2 or later.