Lucene search

VmwareCVELIST:CVE-2023-20865

HistoryApr 20, 2023 - 12:00 a.m.

CVE-2023-20865

2023-04-2000:00:00

vmware

www.cve.org

vmware aria operations

command injection

vulnerability

administrative privileges

arbitrary commands

root access

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrary commands as root.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "VMware Aria Operations for Logs (formerly vRealize Log Insight)",
    "versions": [
      {
        "version": "VMware Aria Operations for Logs (formerly vRealize Log Insight) prior to 8.12",
        "status": "affected"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2023-0007.html