Lucene search
PRIOn knowledge basePRION:CVE-2023-20864HistoryApr 20, 2023 - 9:15 p.m.
Deserialization of untrusted data
2023-04-2021:15:00
PRIOn knowledge base
www.prio-n.com
8
vmware
aria operations
logs
deserialization vulnerability
arbitrary code execute
network access
VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root.
| CPE | Name | Operator | Version |
|---|---|---|---|
| aria_operations_for_logs | ge | 8.10.2 | |
| aria_operations_for_logs | lt | 8.12.0 | |
| cloud_foundation | ge | 4.0 | |
| cloud_foundation | le | 4.5 |
Related
nuclei
nuclei
VMware Aria Operations for Logs - Unauthenticated Remote Code Execution
2023-04-25 15:24:16
nessus
nessus
VMware Aria Operations for Logs 8.10.2 RCE (VMSA-2023-0007)
2023-04-28 00:00:00
hivepro
hivepro
Exploit found in the wild for Critical VMware Aria Operations Bug
2023-07-13 06:59:50
cvelist
cvelist
CVE-2023-20864
2023-04-20 00:00:00
nvd
nvd
CVE-2023-20864
2023-04-20 21:15:08
zdi
zdi
cve
cve
CVE-2023-20864
2023-04-20 21:15:08
vmware
vmware
thn
thn
VMware Releases Critical Patches for Workstation and Fusion Software
2023-04-26 07:05:00