Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveVmwareCVE-2023-20879
HistoryMay 12, 2023 - 9:15 p.m.

CVE-2023-20879

2023-05-1221:15:09
vmware
web.nvd.nist.gov
29
vmware
aria operations
local privilege escalation
cve-2023-20879
nvd

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

5.1%

JSON

VMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor with administrative privileges in the Aria Operations application can gain root access to the underlying operating system.

Affected configurations

Nvd
Node
vmwarecloud_foundationRange4.0–4.5
OR
vmwarevrealize_operationsMatch8.6.0-
OR
vmwarevrealize_operationsMatch8.6.0hotfix1
OR
vmwarevrealize_operationsMatch8.6.0hotfix2
OR
vmwarevrealize_operationsMatch8.6.0hotfix4
OR
vmwarevrealize_operationsMatch8.6.0hotfix5
OR
vmwarevrealize_operationsMatch8.6.0hotfix6
OR
vmwarevrealize_operationsMatch8.6.0hotfix8
OR
vmwarevrealize_operationsMatch8.6.0hotfix9
OR
vmwarevrealize_operationsMatch8.10.0-
OR
vmwarevrealize_operationsMatch8.10.0hotfix1
OR
vmwarevrealize_operationsMatch8.10.0hotfix2
VendorProductVersionCPE
vmwarecloud_foundation*cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
vmwarevrealize_operations8.6.0cpe:2.3:a:vmware:vrealize_operations:8.6.0:-:*:*:*:*:*:*
vmwarevrealize_operations8.6.0cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix1:*:*:*:*:*:*
vmwarevrealize_operations8.6.0cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix2:*:*:*:*:*:*
vmwarevrealize_operations8.6.0cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix4:*:*:*:*:*:*
vmwarevrealize_operations8.6.0cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix5:*:*:*:*:*:*
vmwarevrealize_operations8.6.0cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix6:*:*:*:*:*:*
vmwarevrealize_operations8.6.0cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix8:*:*:*:*:*:*
vmwarevrealize_operations8.6.0cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix9:*:*:*:*:*:*
vmwarevrealize_operations8.10.0cpe:2.3:a:vmware:vrealize_operations:8.10.0:-:*:*:*:*:*:*
Rows per page:
1-10 of 121

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "VMware Aria Operations (formerly vRealize Operations)",
    "versions": [
      {
        "version": "VMware Aria Operations prior to 8.12",
        "status": "affected"
      }
    ]
  }
]

Related

cvelist 1
prion 1
nvd 1
vmware 1
nessus 1
cvelist
cvelist
CVE-2023-20879
2023-05-12 00:00:00
prion
prion
Privilege escalation
2023-05-12 21:15:00
nvd
nvd
CVE-2023-20879
2023-05-12 21:15:09
vmware
vmware
VMware Aria Operations update addresses multiple Local Privilege Escalations and a Deserialization issue (CVE-2023-20877, CVE-2023-20878, CVE-2023-20879, CVE-2023-20880)
2023-05-11 00:00:00
nessus
nessus
VMware vRealize Operations Multiple Vulnerabilities (VMSA-2023-0009)
2023-05-18 00:00:00

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for CVE-2023-20879
cvelist1prion1nvd1vmware1nessus1