Lucene search

[email protected]CVE-2023-20879

HistoryMay 12, 2023 - 9:15 p.m.

CVE-2023-20879

2023-05-1221:15:09

[email protected]

web.nvd.nist.gov

vmware

aria operations

local privilege escalation

cve-2023-20879

nvd

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

VMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor with administrative privileges in the Aria Operations application can gain root access to the underlying operating system.

Affected configurations

NVD

Node

vmwarecloud_foundationRange4.0–4.5

vmwarevrealize_operationsMatch8.6.0-

vmwarevrealize_operationsMatch8.6.0hotfix1

vmwarevrealize_operationsMatch8.6.0hotfix2

vmwarevrealize_operationsMatch8.6.0hotfix4

vmwarevrealize_operationsMatch8.6.0hotfix5

vmwarevrealize_operationsMatch8.6.0hotfix6

vmwarevrealize_operationsMatch8.6.0hotfix8

vmwarevrealize_operationsMatch8.6.0hotfix9

vmwarevrealize_operationsMatch8.10.0-

vmwarevrealize_operationsMatch8.10.0hotfix1

vmwarevrealize_operationsMatch8.10.0hotfix2

CPENameOperatorVersion
vmware:cloud_foundationvmware cloud foundationle4.5
vmware:vrealize_operationsvmware vrealize operationseq8.6.0
vmware:vrealize_operationsvmware vrealize operationseq8.10.0

CPE	Name	Operator	Version
vmware:cloud_foundation	vmware cloud foundation	le	4.5
vmware:vrealize_operations	vmware vrealize operations	eq	8.6.0
vmware:vrealize_operations	vmware vrealize operations	eq	8.10.0

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "VMware Aria Operations (formerly vRealize Operations)",
    "versions": [
      {
        "version": "VMware Aria Operations prior to 8.12",
        "status": "affected"
      }
    ]
  }
]