TI-2017-03077 Aliases CVE-2017-4946 GHSA-g7vg-w39c-g2rp

Incorrect authorization in VMware vRealize Operations for Horizon

LOW 35CWE-863Published 2018-01-05 · Updated 2024-09-16

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-863.

Summary

The VMware V4H and V4PA desktop agents (6.x before 6.5.1) contain a privilege escalation vulnerability. Successful exploitation of this issue could result in a low privileged windows user escalating their privileges to SYSTEM.

Why it matters now

EPSS 0.00503 43rd percentileScored 2026-11-07

Fix Fixed vRealize Operations for Horizon (V4H) (VMware): 6.5.1vRealize Operations for Published Applications (V4PA) (VMware): 6.5.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
VMware	vRealize Operations for Horizon (V4H)	6 to before 6.5.1	6.5.1	Patch available	CNA
VMware	vRealize Operations for Published Applications (V4PA)	6 to before 6.5.1	6.5.1	Patch available	CNA

vRealize Operations for Horizon (V4H) VendorVMware Affected 6 to before 6.5.1 Fixed in 6.5.1 Patch available CNA
vRealize Operations for Published Applications (V4PA) VendorVMware Affected 6 to before 6.5.1 Fixed in 6.5.1 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:vmware:vrealize_operations_for_horizon::::::::	6.0 to before 6.5.1	Vulnerable	VMware
cpe:2.3:a:vmware:vrealize_operations_for_published_applications::::::::	6.1.0 to before 6.5.1	Vulnerable	VMware

cpe:2.3:a:vmware:vrealize_operations_for_horizon:*:*:*:*:*:*:*:* Versions 6.0 to before 6.5.1 Vulnerable ·VMware
cpe:2.3:a:vmware:vrealize_operations_for_published_applications:*:*:*:*:*:*:*:* Versions 6.1.0 to before 6.5.1 Vulnerable ·VMware

Remediation

Fix · CNA vRealize Operations for Horizon (V4H) (VMware) Fixed in 6.5.1
Fix · CNA vRealize Operations for Published Applications (V4PA) (VMware) Fixed in 6.5.1

Timeline

2026-10-02 Threatist record created from CVE-2017-4946
2026-10-03 Alias added: GHSA-g7vg-w39c-g2rp

References

Patch 1

https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html

Other 1

http://gosecure.net/2018/01/10/vmware-horizon-v4h-v4pa-desktop-agent-privilege-escalation-vulnerability-cve-2017-4946/

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences