Vulnerabilitycritical

Urgent: VMware Warns of Unpatched Critical Cloud Director Vulnerability

The Hacker Newsby @TheHackersNewsDec 2, 2023 · 07:24 UTC (Dec 2, 2023)1 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2023-34060 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-34060 CVE-2023-34048

Tags: cve-2023-34060 cve-2023-34048 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-34048	Unauthenticated Out-of-Bounds Write RCE in VMware vCenter Server	9.8	99%	KEVPoC	Oct 25, 2023 KEV Jan 22, 2024
CVE-2023-34060	VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 10.5 from an older…	9.8	1%		Nov 14, 2023

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Nov 15, 2023 Network Securit / Vulnerability VMware is warning of a critical and unpatched security flaw in Cloud Director that could be exploited by a malicious actor to get around authentication protections. Tracked as CVE-2023-34060 (CVSS score: 9. 8), the vulnerability impacts instances that have been upgraded to version 10.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.