https://blog.mirch.io/tags/vmware/ Recent content in vmware on Rich Mirch Hugo en-us Wed, 18 Mar 2020 03:55:16 +0000 https://blog.mirch.io/2020/03/17/cve-2020-3950-vmware-fusion-elevation-of-privilege/ Wed, 18 Mar 2020 03:55:16 +0000 https://blog.mirch.io/2020/03/17/cve-2020-3950-vmware-fusion-elevation-of-privilege/ <p>VMware Fusion 11.5.12 and prior are vulnerable to an elevation of privilege vulnerability. For more details please review the advisory and proof of concept on my GitHub page <a href="https://github.com/mirchr/security-research/blob/master/vulnerabilities/CVE-2020-3950.sh">CVE-2020-3950.sh</a>. VMware released the patch last week and a public advisory <a href="https://www.vmware.com/security/advisories/VMSA-2020-0005.html">VMSA-2020-0005</a> today however it has been determined that the patch does not properly fix the vulnerability. I reached out to the VMware security team and received a response at 10:31 UTC 2020-03-18 - &ldquo;We are aware of the situation and working on the next steps&rdquo;.</p>