Lucene search

PRIOn knowledge basePRION:CVE-2023-20865

HistoryApr 20, 2023 - 9:15 p.m.

Command injection

2023-04-2021:15:00

PRIOn knowledge base

www.prio-n.com

vmware aria

operations

logs

command injection

vulnerability

root access

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrary commands as root.

CPENameOperatorVersion
aria_operations_for_logsge8.6.0
aria_operations_for_logslt8.12.0
cloud_foundationge4.0
cloud_foundationle4.5

Name	Operator	Version
aria_operations_for_logs	ge	8.6.0
aria_operations_for_logs	lt	8.12.0
cloud_foundation	ge	4.0
cloud_foundation	le	4.5

References

www.vmware.com/security/advisories/VMSA-2023-0007.html