CVE-2023-34051

Опубликовано: 20 окт. 2023

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

Ссылки

https://www.vmware.com/security/advisories/VMSA-2023-0021.html
Patch
Vendor Advisory
https://www.vmware.com/security/advisories/VMSA-2023-0021.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vmware:aria_operations_for_logs:4.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:aria_operations_for_logs:5.0:*:*:*:*:*:*:*

cpe:2.3:a:vmware:aria_operations_for_logs:8.6:*:*:*:*:*:*:*

cpe:2.3:a:vmware:aria_operations_for_logs:8.8:*:*:*:*:*:*:*

cpe:2.3:a:vmware:aria_operations_for_logs:8.10:*:*:*:*:*:*:*

cpe:2.3:a:vmware:aria_operations_for_logs:8.10.2:*:*:*:*:*:*:*

cpe:2.3:a:vmware:aria_operations_for_logs:8.12:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.57738

Средний

9.8 Critical

CVSS3

Дефекты

CWE-863

Связанные уязвимости

GHSA-ghvx-5v39-7hv5

CVSS3: 9.8

github

больше 2 лет назад

BDU:2023-07029

CVSS3: 8.1

fstec