Skip to content
OpenAdvisories
Critical · 9.9 CVE-2023-34063 EUVD-2023-38176GHSA-fcww-v4hr-rgfr

Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to…

Published Jan 16, 2024 · Updated Jun 20, 2025 · Assigned by vmware

Description

Aria Automation contains a Missing Access Control vulnerability.

An authenticated malicious actor may
exploit this vulnerability leading to unauthorized access to remote
organizations and workflows.

Affected products

VendorProductAffectedFixed
— VMware Aria Automation, VMware Cloud Foundation Aria Automation 8.14.1, Aria Automation 8.14.0, Aria Automation 8.13.1, Aria Automation 8.13.0, Aria Automation 8.12.2, Aria Automation 8.12.1, Aria Automation 8.12.0, Aria Automation 8.11.2, Aria Automation 8.11.1, Aria Automation 8.11.0 —

Advisories 1

References