CVE-2023-34056

—

CVSS 3.1

4.3 medium

EPSS

<1%p50

Published

Oct 25, 2023 (Oct 25, 2023)

Modified

Jun 17, 2026

Description

vCenter Server contains a partial information disclosure vulnerability. A malicious actor with non-administrative privileges to vCenter Server may leverage this issue to access unauthorized data.

Vendors: vmware
Products: vcenter server
Weakness: CWE-922
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news4 stories

VMware patches critical vulnerability in vCenter Server (CVE-2023-34048)

Help Net SecurityJan 22, 10:00 UTC · Jan 22, 2024Vulnerability in the wildCVE-2023-34048 CVE-2023-34056 CVE-2023-20887+1 CVEs

Week in review: VMware patches critical vulnerability, 1Password affected by Okta breach

Help Net SecurityOct 29, 00:00 UTC · Oct 29, 2023Vulnerability CVE-2023-20198 CVE-2023-5631 CVE-2023-34048+1 CVEs

VMware addressed critical vCenter flaw also for End-of

Security AffairsOct 25, 14:11 UTC · Oct 25, 2023Vulnerability CVE-2023-34048 CVE-2023-34056

Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability

The Hacker NewsOct 25, 10:11 UTC · Oct 25, 2023Vulnerability in the wildCVE-2023-34048 CVE-2023-34056