Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-20900

Опубликовано: 31 авг. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.1

Описание

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

released

2:12.2.5-1ubuntu1
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/bionic

released

2:11.0.5-4ubuntu0.18.04.3+esm2
esm-infra/focal

not-affected

2:11.3.0-2ubuntu0~ubuntu20.04.6
esm-infra/xenial

released

2:10.2.0-3~ubuntu0.16.04.1+esm3
focal

released

2:11.3.0-2ubuntu0~ubuntu20.04.6
jammy

released

2:12.1.5-3~ubuntu0.22.04.3
lunar

released

2:12.1.5-3ubuntu0.23.04.2
mantic

released

2:12.2.5-1ubuntu1

Показывать по

EPSS

Процентиль: 75%
0.00953
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
redhat
почти 2 года назад

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .

CVSS3: 7.1
nvd
почти 2 года назад

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .

CVSS3: 7.1
debian
почти 2 года назад

A malicious actor that has been granted Guest Operation Privileges ht ...

suse-cvrf
больше 1 года назад

Securitys update for open-vm-tools

suse-cvrf
больше 1 года назад

Security update for open-vm-tools

EPSS

Процентиль: 75%
0.00953
Низкий

7.1 High

CVSS3