Two critical vulnerabilities have been identified in VMware Tools and labeled CVE-2023-34057 and CVE-2023-34058. These vulnerabilities are related to local privilege escalation and SAML token signature bypass.
These vulnerabilities have a high severity rating of 7.5 (High) and 7.8 (High) respectively. One of these vulnerabilities was identified in macOS systems. VMware has taken immediate action to address these issues by releasing patches and issuing security alerts.
CVE-2023-34057: Local Privilege Elevation Vulnerability This vulnerability allows a malicious actor with local user privileges within a guest virtualization machine to exploit and gain elevated privileges within that virtual machine. The severity of this vulnerability is rated 7.8 (High).
CVE-2023-34058: SAML token signature bypass To exploit this vulnerability, a threat actor must have “guest operation privileges”. These privileges determine the ability to interact with files and applications in the guest operating system of a virtual machine. With these privileges, a malicious actor can exploit this vulnerability in a targeted virtual machine and elevate their privileges if the target virtualization machine has a higher privileged guest alias. The severity rating for this vulnerability is 7.5 (High).
| Product | Version | Running On | CVE Identifier | CVSSv3 | Severity | Fixed Version | Workarounds | Additional Documentation |
| VMware Tools | 12.x.x, 11.x.x, 10.3.x | macOS | CVE-2023-34057 | 7.8 | Important | 12.1.1 | None | None |
| VMware Tools | 12.x.x, 11.x.x, 10.3.x | Windows | CVE-2023-34057 | N/A | N/A | Unaffected | N/A | N/A |
| VMware Tools | 12.x.x, 11.x.x, 10.3.x | macOS | CVE-2023-34058 | N/A | N/A | Unaffected | N/A | N/A |
| VMware Tools | 12.x.x, 11.x.x, 10.3.x | Windows | CVE-2023-34058 | 7.5 | Important | 12.3.5 | None | None |
Users of these products are strongly advised to update to the latest version to minimize the risk of exploiting these vulnerabilities.