CVE-2019-5513
published 2019-04-09CVE-2019-5513: VMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains an information disclosure vulnerability. Successful…
PriorityP276medium5.3CVSS 3.0
AVNACLPRNUINSUCLINAN
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
1.23%
68.8th percentile
VMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains an information disclosure vulnerability. Successful exploitation of this issue may allow disclosure of internal domain names, the Connection Server’s internal name, or the gateway’s internal IP address.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | horizon | >= 6.0.0 < 6.2.8 | 6.2.8 |
| vmware | horizon | >= 7.0 < 7.8 | 7.8 |
| vmware | horizon | >= 7.5.0 < 7.5.2 | 7.5.2 |
CVSS provenance
nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vulncheck5.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fw8h-225v-qpf3: VMware Horizon Connection Server (7
ghsa_unreviewed·2022-05-13
CVE-2019-5513 [MEDIUM] GHSA-fw8h-225v-qpf3: VMware Horizon Connection Server (7
VMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains an information disclosure vulnerability. Successful exploitation of this issue may allow disclosure of internal domain names, the Connection Server’s internal name, or the gateway’s internal IP address.
VulnCheck
VMware horizon Vulnerability
vulncheck·2019·CVSS 5.3
CVE-2019-5513 [MEDIUM] VMware horizon Vulnerability
VMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains an information disclosure vulnerability. Successful exploitation of this issue may allow disclosure of internal domain names, the Connection Server’s internal name, or the gateway’s internal IP address.
Affected: VMware horizon
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://ess.coalitioninc.com/cve/?id=CVE-2019-5513
Exploit PoC: https://vulncheck.com/xdb/aff7ba9df8cf
VMware
VMware Horizon update addresses Connection Server information disclosure vulnerability
vendor_vmware·2019-03-14·CVSS 5.3
CVE-2019-5511 [MEDIUM] VMware Horizon update addresses Connection Server information disclosure vulnerability
VMSA-2019-0003: VMware Horizon update addresses Connection Server information disclosure vulnerability
VMware Horizon update addresses Connection Server information disclosure vulnerability 2. Relevant Products VMware Horizon 3. Problem Description Connection Server Information disclosure vulnerability The VMware Horizon Connection Server contains an information disclosure vulnerability. Successful exploitation of this issue may allow disclosure of internal domain names, the Connection Server’s internal name, or the gateway’s internal IP address. VMware would like to thank Cory Mathews of Critical Start and HD Moore of Atredis Partners for independently reporting this issue to us. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2019-5513 to
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-04-09
Published
Exploited in the wild