VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'.
References
Link | Resource |
---|---|
https://www.vmware.com/security/advisories/VMSA-2023-0020.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
29 Sep 2023, 18:22
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://www.vmware.com/security/advisories/VMSA-2023-0020.html - Patch, Vendor Advisory | |
CPE | cpe:2.3:a:vmware:aria_operations:8.10.0:-:*:*:*:*:*:* cpe:2.3:a:vmware:aria_operations:8.12.0:hotfix3:*:*:*:*:*:* cpe:2.3:a:vmware:cloud_foundation:5.0:*:*:*:*:*:*:* cpe:2.3:a:vmware:aria_operations:8.12.0:hotfix2:*:*:*:*:*:* cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:* cpe:2.3:a:vmware:aria_operations:8.12.0:hotfix1:*:*:*:*:*:* cpe:2.3:a:vmware:aria_operations:8.6.0:-:*:*:*:*:*:* cpe:2.3:a:vmware:aria_operations:8.12.0:-:*:*:*:*:*:* |
|
CWE | CWE-269 | |
First Time |
Vmware
Vmware aria Operations Vmware cloud Foundation |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.7 |
27 Sep 2023, 15:18
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-09-27 15:18
Updated : 2024-02-28 20:33
NVD link : CVE-2023-34043
Mitre link : CVE-2023-34043
CVE.ORG link : CVE-2023-34043
JSON object : View
Products Affected
vmware
- aria_operations
- cloud_foundation
CWE
CWE-269
Improper Privilege Management