CVE-2020-3998

Description

VMware Horizon Client for Windows (5.x prior to 5.5.0) contains an information disclosure vulnerability. A malicious attacker with local privileges on the machine where Horizon Client for Windows is installed may be able to retrieve hashed credentials if the client crashes.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.239

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-3991,CVE-2020-3998 are affected in VMware Horizon Client (x64) 5.4.99	Windows
Vulnerabilities CVE-2020-3991,CVE-2020-3998 are affected in VMware Horizon Client 5.4.99	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234