6.7

CVE-2023-20879

VMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor with administrative privileges in the Aria Operations application can gain root access to the underlying operating system.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMwareCloud Foundation Version >= 4.0 <= 4.5
VMwareVrealize Operations Version8.6.0 Update-
VMwareVrealize Operations Version8.6.0 Updatehotfix1
VMwareVrealize Operations Version8.6.0 Updatehotfix2
VMwareVrealize Operations Version8.6.0 Updatehotfix4
VMwareVrealize Operations Version8.6.0 Updatehotfix5
VMwareVrealize Operations Version8.6.0 Updatehotfix6
VMwareVrealize Operations Version8.6.0 Updatehotfix8
VMwareVrealize Operations Version8.6.0 Updatehotfix9
VMwareVrealize Operations Version8.10.0 Update-
VMwareVrealize Operations Version8.10.0 Updatehotfix1
VMwareVrealize Operations Version8.10.0 Updatehotfix2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.105
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H