CVE-2023-34051criticalCWE-863

CVE-2023-34051: critical vulnerability in VMware Aria Operations for Logs

Published · Updated

Follow this CVE+ Monitor VMware Aria Operations for Logs

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

62Vexday Risk Score

Keep watching. It has a public proof of concept.

ssvc Attendcvss 9.8epss 48%
from disclosure to weaponsame day
Published on NVDOct 20
1st PoCOct 20
VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · VMware Aria Operations for Logs
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.