VMware fixes critical vulnerability in Aria Operations for Networks (CVE-2023-34039)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20887 | Unauthenticated Command Injection RCE in VMware Aria Operations for Networks | 9.8 | 98% | KEVPoC | KEV |
CVE-2023-34039+1 related CVE | Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation | 9.8 group max | 67% | PoC |
From the original article
1 min read at helpnetsecurity.com
VMware has patched one critical (CVE-2023-34039) and one high-severity vulnerability (CVE-2023-20890) in Aria Operations for Networks, its popular enterprise network monitoring tool. CVE-2023-34039 is a network bypass vulnerability arising as a result of a lack of unique cryptographic key generation.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.