Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitycritical

VMware addressed an information disclosure flaw in VMware Tanzu Application Service for VMs and Isolation Segment

Security Affairsby @securityaffairs ()1 min read2 · 2 reads
Read at securityaffairs.com
Analyze CVE-2023-20891 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2023-20891CVE-2023-20864
Tags
cve-2023-20891cve-2023-20864vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-20864
VMware Aria Operations for Logs contains a deserialization vulnerability
9.870%
CVE-2023-20891
The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of credentials in hex…
6.5<1%

From the original article

1 min read at securityaffairs.com

VMware fixed an information disclosure flaw in VMware Tanzu Application Service for VMs and Isolation Segment that exposed CF API admin credentials in audit logs. VMware has addressed an information disclosure vulnerability, tracked as CVE-2023-20891 (CVSSv3 score 6. 5), in VMware Tanzu Application Service for VMs (TAS for VMs) and Isolation Segment that exposed logged credentials via system audit logs.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.