Vulnerabilitycritical

VMware fixes CVE-2023-20887 bug in Aria Operations for Networks

Security Affairsby @securityaffairsJun 7, 2023 · 21:02 UTC (Jun 7, 2023)1 min read1 · 1 read

Read at securityaffairs.com

Analyze CVE-2023-20887 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-20887 CVE-2023-20888 CVE-2023-20889 CVE-2023-20864 CVE-2023-20865

Tags: cve-2023-20887 cve-2023-20888 cve-2023-20889 cve-2023-20864 cve-2023-20865 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-20864 +1 related CVE CVE-2023-20865	VMware Aria Operations for Logs contains a deserialization vulnerability	9.8 group max	70%		Apr 20, 2023
CVE-2023-20887	Unauthenticated Command Injection RCE in VMware Aria Operations for Networks	9.8	98%	KEVPoC	Jun 7, 2023 KEV Jun 22, 2023
CVE-2023-20888 +1 related CVE CVE-2023-20889	Aria Operations for Networks contains an authenticated deserialization vulnerability	8.8 group max	82%		Jun 7, 2023

From the original article

1 min read at securityaffairs.com

Virtualization giant VMware addressed critical and high-severity vulnerabilities in VMware Aria Operations for Networks. Virtualization technology giant VMware released security patches to address three critical and high-severity vulnerabilities, tracked as CVE-2023-20887, CVE-2023-20888, CVE-2023-20889, in VMware Aria Operations for Networks.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.