CVE-2022-22962

VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the default shared folder location due to a vulnerable symbolic link. Successful exploitation can result in linking to a root owned file.

Score

CVSS 3.1 7.8 High

Status

Modified - security@vmware.com

Published

2022-04-11

Last modified

2024-08-03

Weaknesses

CWE-59

Affected products

• Horizon (Vmware)
• Vmware Horizon Agent For Linux (Vmware)

References

• https://www.vmware.com/security/advisories/VMSA-2022-0012.html