CVE-2019-5511
published 2019-04-09CVE-2019-5511: VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Successful exploitation of this issue may…
PriorityP341high8.8CVSS 3.0
AVLACLPRLUINSCCHIHAH
EPSS
0.37%
29.6th percentile
VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Successful exploitation of this issue may allow the path to the VMX executable, on a Windows host, to be hijacked by a non-administrator leading to elevation of privilege.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | workstation | >= 14.0.0 < 14.1.6 | 14.1.6 |
| vmware | workstation | >= 15.0.0 < 15.0.3 | 15.0.3 |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8g5g-pp3h-rchw: VMware Workstation (15
ghsa_unreviewed·2022-05-13
CVE-2019-5511 [HIGH] GHSA-8g5g-pp3h-rchw: VMware Workstation (15
VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Successful exploitation of this issue may allow the path to the VMX executable, on a Windows host, to be hijacked by a non-administrator leading to elevation of privilege.
VMware
VMware Horizon update addresses Connection Server information disclosure vulnerability
vendor_vmware·2019-03-14·CVSS 5.3
CVE-2019-5511 [MEDIUM] VMware Horizon update addresses Connection Server information disclosure vulnerability
VMSA-2019-0003: VMware Horizon update addresses Connection Server information disclosure vulnerability
VMware Horizon update addresses Connection Server information disclosure vulnerability 2. Relevant Products VMware Horizon 3. Problem Description Connection Server Information disclosure vulnerability The VMware Horizon Connection Server contains an information disclosure vulnerability. Successful exploitation of this issue may allow disclosure of internal domain names, the Connection Server’s internal name, or the gateway’s internal IP address. VMware would like to thank Cory Mathews of Critical Start and HD Moore of Atredis Partners for independently reporting this issue to us. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2019-5513 to
Suricata
ET WEB_SPECIFIC_APPS Beward fileread READ.filepath Parameter Arbitrary File Disclosure Attempt (CVE-2019-25246)
suricata·2026-01-05·CVSS 7.1
CVE-2019-25246 [HIGH] ET WEB_SPECIFIC_APPS Beward fileread READ.filepath Parameter Arbitrary File Disclosure Attempt (CVE-2019-25246)
ET WEB_SPECIFIC_APPS Beward fileread READ.filepath Parameter Arbitrary File Disclosure Attempt (CVE-2019-25246)
Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Beward fileread READ.filepath Parameter Arbitrary File Disclosure Attempt (CVE-2019-25246)"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/cgi-bin/operator/fileread|3f|"; startswith; fast_pattern; content:"READ.filepath|3d|"; distance:0; reference:url,www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5511.php; reference:cve,2019-25246; classtype:attempted-admin; sid:2066568; rev:1; metadata:affected_product Beward, attack_target Networking_Equipment, tls_state plaintext, created_at 2026_01_05, cve CVE_2019_25246, deployment Perimeter, deployment Internal, performance_impact Low, confi
No public exploits indexed.
No writeups or analysis indexed.
2019-04-09
Published