CVE-2023-34051

critical · 9.8

VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

9.8

CVSS

44.7%

EPSS (exploit prob.)

99th

EPSS percentile

2023-10-20

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-863

Affected products

Vendor	Product	Affected versions
vmware	aria_operations_for_logs	4.0
vmware	aria_operations_for_logs	5.0
vmware	aria_operations_for_logs	8.6
vmware	aria_operations_for_logs	8.8
vmware	aria_operations_for_logs	8.10
vmware	aria_operations_for_logs	8.10.2
vmware	aria_operations_for_logs	8.12

Check a specific version with /api/v1/cve/match.

References

https://www.vmware.com/security/advisories/VMSA-2023-0021.html
https://www.vmware.com/security/advisories/VMSA-2023-0021.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-34051