Skip to content
NewA calmer, faster ZeroHour

VMware: Plug critical Aria Automation hole immediately! (CVE-2023-34063)

Help Net Securityby @zeljkazorz ()1 min read2 · 1 read
Analyze CVE-2023-34063 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-34063
Aria Automation contains a Missing Access Control vulnerability
8.3<1%

From the original article

1 min read at helpnetsecurity.com

A critical vulnerability (CVE-2023-34063) affecting VMware Aria Automation and VMware Cloud Foundation can be exploited by attackers to gain access to remote organizations and workflows, VMware has warned . The company is not aware of any “in the wild” exploitation of this flaw – for now. Patches are available and VMware recommends upgrading to VMware Aria Automation 8.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.