CVE-2022-22964

3 documents3 sources
Severity
7.8HIGH
EPSS
0.0%
top 88.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Vmware HorizonVmware Vmware Horizon Agent FOR Linux
Timeline
PublishedApr 11
Latest updateApr 12

Description

VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation that allows a user to escalate to root due to a vulnerable configuration file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5vmware/vmware_horizon_agent_for_linuxVMware Horizon Agent for Linux prior to 22.x
▶NVDvmware/horizon< 2203

🔴Vulnerability Details

2
GHSA
GHSA-cqvx-68xp-4vj9: VMware Horizon Client for Linux (prior to 22↗2022-04-12
▶
CVEList
CVE-2022-22964: VMware Horizon Agent for Linux (prior to 22↗2022-04-11
▶
CVE-2022-22964 (HIGH CVSS 7.8) | VMware Horizon Agent for Linux (pri | cvebase.io