9.8
CVE-2023-34051
- EPSS 57.74%
- Veröffentlicht 20.10.2023 05:15:07
- Zuletzt bearbeitet 02.05.2025 19:15:55
- Quelle security@vmware.com
- CVE-Watchlists
- Unerledigt
LoginVMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
VMware ≫ Aria Operations For Logs Version4.0
VMware ≫ Aria Operations For Logs Version5.0
VMware ≫ Aria Operations For Logs Version8.6
VMware ≫ Aria Operations For Logs Version8.8
VMware ≫ Aria Operations For Logs Version8.10
VMware ≫ Aria Operations For Logs Version8.10.2
VMware ≫ Aria Operations For Logs Version8.12
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 57.74% | 0.981 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-863 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.