CVE-2020-3980
Last modified
CVE-2020-3980 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user privileges may exploit this issue to trick an admin user into executing malicious code on the system where Fusion is installed.. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user privileges may exploit this issue to trick an admin user into executing malicious code on the system where Fusion is installed.
Metrics
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Vmware | Fusion | >= 11.0.0, < 12.0.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-3980?
How severe is CVE-2020-3980?
How do I fix CVE-2020-3980?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-3973The VeloCloud Orchestrator does not apply correct input vali…8.8
- CVE-2020-3974VMware Fusion (11.x before 11.5.5), VMware Remote Console fo…7.8
- CVE-2020-3975VMware App Volumes 2.x prior to 2.18.6 and VMware App Volume…5.4
- CVE-2020-3976VMware ESXi and vCenter Server contain a partial denial of s…5.3
- CVE-2020-3977VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) cont…6.5
- CVE-2020-3979InstallBuilder for Qt Windows (versions prior to 20.7.0) ins…7.8
- CVE-2020-3981VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before …5.8
- CVE-2020-3982VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before …7.7
- CVE-2020-3984The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x pr…6.5
- CVE-2020-3985The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x pr…8.8
- CVE-2020-3986VMware Workstation (15.x) and Horizon Client for Windows (5.…6.1
- CVE-2020-3987VMware Workstation (15.x) and Horizon Client for Windows (5.…6.1
Are you affected by CVE-2020-3980?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST