Kevin Beaumont on Nostr: VMware have set the Attack Vector to Local, which brings down the CVSS score - but ...

VMware have set the Attack Vector to Local, which brings down the CVSS score - but you don't need to be locally at a VM to do the attack, you can do it over the internet if you have access to any VM.

If you change it to Network, you get 10