VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
References
| Link | Resource |
|---|---|
| https://www.vmware.com/security/advisories/VMSA-2023-0021.html | Patch Vendor Advisory |
| https://www.vmware.com/security/advisories/VMSA-2023-0021.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
02 May 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.vmware.com/security/advisories/VMSA-2023-0021.html - Patch, Vendor Advisory |
30 Oct 2023, 15:28
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:vmware:aria_operations_for_logs:8.10:*:*:*:*:*:*:* cpe:2.3:a:vmware:aria_operations_for_logs:8.6:*:*:*:*:*:*:* cpe:2.3:a:vmware:aria_operations_for_logs:8.8:*:*:*:*:*:*:* cpe:2.3:a:vmware:aria_operations_for_logs:8.12:*:*:*:*:*:*:* cpe:2.3:a:vmware:aria_operations_for_logs:4.0:*:*:*:*:*:*:* cpe:2.3:a:vmware:aria_operations_for_logs:5.0:*:*:*:*:*:*:* cpe:2.3:a:vmware:aria_operations_for_logs:8.10.2:*:*:*:*:*:*:* |
|
| First Time |
Vmware aria Operations For Logs
Vmware |
|
| CWE | CWE-863 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| References | (MISC) https://www.vmware.com/security/advisories/VMSA-2023-0021.html - Patch, Vendor Advisory |
20 Oct 2023, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-20 05:15
Updated : 2025-05-02 19:15
NVD link : CVE-2023-34051
Mitre link : CVE-2023-34051
JSON object : View
Products Affected
vmware
- aria_operations_for_logs
CWE
CWE-863
Incorrect Authorization