Lucene search

VmwareCVELIST:CVE-2020-3998

HistoryOct 23, 2020 - 1:49 p.m.

CVE-2020-3998

2020-10-2313:49:50

vmware

www.cve.org

vmware

horizon client

windows

information disclosure

vulnerability

hashed credentials

local privileges

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

25.7%

JSON

VMware Horizon Client for Windows (5.x prior to 5.5.0) contains an information disclosure vulnerability. A malicious attacker with local privileges on the machine where Horizon Client for Windows is installed may be able to retrieve hashed credentials if the client crashes.

CNA Affected

[
  {
    "product": "VMware Horizon Client for Windows",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Horizon Client for Windows (5.x prior to 5.5.0)"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2020-0024.html