Description
VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware Aria Operations for Logs (formerly vRealize Log Insight) | VMware Aria Operations for Logs (formerly vRealize Log Insight) 8.10.2 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- VMware Aria Operations for Logs - Unauthenticated Remote Code Execution http/cves/2023/CVE-2023-20864.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.