CVE-2023-20878

Опубликовано: 12 мая 2023

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system.

Ссылки

https://www.vmware.com/security/advisories/VMSA-2023-0009.html
Vendor Advisory
https://www.vmware.com/security/advisories/VMSA-2023-0009.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*

Версия от 4.0 (включая) до 4.5 (включая)

cpe:2.3:a:vmware:vrealize_operations:8.6.0:-:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix1:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix2:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix4:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix5:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix6:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix8:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix9:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:8.10.0:-:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:8.10.0:hotfix1:*:*:*:*:*:*

cpe:2.3:a:vmware:vrealize_operations:8.10.0:hotfix2:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00763

Низкий

7.2 High

CVSS3

Дефекты

CWE-502

Связанные уязвимости

GHSA-6xfq-86q7-v85v

CVSS3: 7.2

github

больше 2 лет назад