CVE-2023-20878
12.05.2023, 21:15
VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system.Enginsight
| Vendor | Product | Version |
|---|---|---|
| vmware | cloud_foundation | 4.0 ≤ 𝑥 ≤ 4.5 |
| vmware | vrealize_operations | 8.6.0 |
| vmware | vrealize_operations | 8.6.0:hotfix1 |
| vmware | vrealize_operations | 8.6.0:hotfix2 |
| vmware | vrealize_operations | 8.6.0:hotfix4 |
| vmware | vrealize_operations | 8.6.0:hotfix5 |
| vmware | vrealize_operations | 8.6.0:hotfix6 |
| vmware | vrealize_operations | 8.6.0:hotfix8 |
| vmware | vrealize_operations | 8.6.0:hotfix9 |
| vmware | vrealize_operations | 8.10.0 |
| vmware | vrealize_operations | 8.10.0:hotfix1 |
| vmware | vrealize_operations | 8.10.0:hotfix2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration