NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2023-34056

CVSS 3.1: 4.3 medium
EPSS: <1%p50
Published: Oct 25, 2023 · Oct 25, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-34056 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

vCenter Server contains a partial information disclosure vulnerability. A malicious actor with non-administrative privileges to vCenter Server may leverage this issue to access unauthorized data.

Vendors: vmware

Products: vcenter server

Weakness: CWE-922

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

4 stories

VMware patches critical vulnerability in vCenter Server (CVE-2023-34048)

Help Net SecurityJan 22, 10:00 UTC · Jan 22, 2024VulnerabilityExploitedCVE-2023-34048 CVE-2023-34056 CVE-2023-20887+13 · 1 read

60

Week in review: VMware patches critical vulnerability, 1Password affected by Okta breach

Help Net SecurityOct 29, 00:00 UTC · Oct 29, 2023VulnerabilityCVE-2023-20198 CVE-2023-5631 CVE-2023-34048+12 · 1 read

60

VMware addressed critical vCenter flaw also for End-of

Security AffairsOct 25, 14:11 UTC · Oct 25, 2023VulnerabilityCVE-2023-34048 CVE-2023-340562 · 1 read

60

Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability

The Hacker NewsOct 25, 10:11 UTC · Oct 25, 2023VulnerabilityExploitedCVE-2023-34048 CVE-2023-340564 · 1 read

60