PT-2023-2995

CVE-2023-20880

Publicado

2023-05-11

Atualizado

2023-05-24

Descrição por

CVSS 3.1

6.7

Média

MétricasAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Aria Operations (affected versions not specified)

Description The issue is related to insufficient access control in the VMware Aria Operations tool, which can be exploited to execute arbitrary code and escalate privileges. A malicious actor with administrative access to the local system can escalate privileges to 'root'.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impactos

Pesquisadores

Bing

Thiscodecc

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-863: Incorrect Authorization

CWE-264

Identificadores relacionados

CVE-2023-20880