Skip to content
OpenAdvisories
High WID-SEC-2023-1204 4 CVEs

VMware vRealize Operations: Mehrere Schwachstellen

Published May 11, 2023 · Updated May 11, 2023 · de-DE

Vendor: VMware Product: vRealize Operations Product: vRealize Operations < 8.10 Hot Fix 4 Product: vRealize Operations < 8.12 Product: vRealize Operations < 8.6 Hot Fix 10 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in VMware vRealize Operations ausnutzen, um seine Privilegien zu erhöhen oder beliebigen Programmcode auszuführen.

Product

VMware vRealize Operations bietet automatisiertes IT-Betriebsmanagement für Cloud-Umgebungen auf einer einheitlichen, KI-gestützten Plattform.

Vulnerabilities 4

  • High 8.8
    CVE-2023-20877

    VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly pri…

  • High 7.2
    CVE-2023-20878

    VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can e…

  • Medium 6.7
    CVE-2023-20879

    VMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor with administrative privi…

  • Medium 6.7
    CVE-2023-20880

    VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with administrative access to t…

Revision history

  1. #1

    Initiale Fassung

References