Lucene search

VmwareCVE-2023-34056

HistoryOct 25, 2023 - 6:17 p.m.

CVE-2023-34056

2023-10-2518:17:27

vmware

web.nvd.nist.gov

In Wild

cve-2023-34056

vcenter server

information disclosure

vulnerability

nvd

unauthorized access

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

Percentile

9.8%

JSON

vCenter Server contains a partial information disclosure vulnerability. A malicious actor with non-administrative privileges to vCenter Server may leverage this issue to access unauthorized data.

Affected configurations

Nvd

Node

vmwarevcenter_serverRange4.0–5.5

vmwarevcenter_serverMatch7.0-

vmwarevcenter_serverMatch7.0a

vmwarevcenter_serverMatch7.0b

vmwarevcenter_serverMatch7.0c

vmwarevcenter_serverMatch7.0d

vmwarevcenter_serverMatch7.0update1

vmwarevcenter_serverMatch7.0update1a

vmwarevcenter_serverMatch7.0update1c

vmwarevcenter_serverMatch7.0update1d

vmwarevcenter_serverMatch7.0update2

vmwarevcenter_serverMatch7.0update2a

vmwarevcenter_serverMatch7.0update2b

vmwarevcenter_serverMatch7.0update2c

vmwarevcenter_serverMatch7.0update2d

vmwarevcenter_serverMatch7.0update3

vmwarevcenter_serverMatch7.0update3a

vmwarevcenter_serverMatch7.0update3c

vmwarevcenter_serverMatch7.0update3d

vmwarevcenter_serverMatch7.0update3e

vmwarevcenter_serverMatch7.0update3f

vmwarevcenter_serverMatch7.0update3g

vmwarevcenter_serverMatch7.0update3h

vmwarevcenter_serverMatch7.0update3i

vmwarevcenter_serverMatch7.0update3j

vmwarevcenter_serverMatch7.0update3k

vmwarevcenter_serverMatch7.0update3l

vmwarevcenter_serverMatch7.0update3m

vmwarevcenter_serverMatch7.0update3n

vmwarevcenter_serverMatch8.0-

vmwarevcenter_serverMatch8.0a

vmwarevcenter_serverMatch8.0b

vmwarevcenter_serverMatch8.0c

vmwarevcenter_serverMatch8.0update1

vmwarevcenter_serverMatch8.0update1a

vmwarevcenter_serverMatch8.0update1b

vmwarevcenter_serverMatch8.0update1c

vmwarevcenter_serverMatch8.0update1d

VendorProductVersionCPE
vmwarevcenter_server8.0cpe:/a:vmware:vcenter_server:8.0:update1::
vmwarevcenter_server7.0cpe:/a:vmware:vcenter_server:7.0:update2b::
vmwarevcenter_server8.0cpe:/a:vmware:vcenter_server:8.0:-::
vmwarevcenter_server7.0cpe:/a:vmware:vcenter_server:7.0:update1::
vmwarevcenter_server7.0cpe:/a:vmware:vcenter_server:7.0:update1a::
vmwarevcenter_server8.0cpe:/a:vmware:vcenter_server:8.0:update1d::
vmwarevcenter_server7.0cpe:/a:vmware:vcenter_server:7.0:update1d::
vmwarevcenter_server7.0cpe:/a:vmware:vcenter_server:7.0:update3a::
vmwarevcenter_server7.0cpe:/a:vmware:vcenter_server:7.0:update3e::
vmwarevcenter_servercpe:/a:vmware:vcenter_server::::

Vendor	Product	Version	CPE
vmware	vcenter_server	8.0	cpe:/a:vmware:vcenter_server:8.0:update1::
vmware	vcenter_server	7.0	cpe:/a:vmware:vcenter_server:7.0:update2b::
vmware	vcenter_server	8.0	cpe:/a:vmware:vcenter_server:8.0:-::
vmware	vcenter_server	7.0	cpe:/a:vmware:vcenter_server:7.0:update1::
vmware	vcenter_server	7.0	cpe:/a:vmware:vcenter_server:7.0:update1a::
vmware	vcenter_server	8.0	cpe:/a:vmware:vcenter_server:8.0:update1d::
vmware	vcenter_server	7.0	cpe:/a:vmware:vcenter_server:7.0:update1d::
vmware	vcenter_server	7.0	cpe:/a:vmware:vcenter_server:7.0:update3a::
vmware	vcenter_server	7.0	cpe:/a:vmware:vcenter_server:7.0:update3e::
vmware	vcenter_server		cpe:/a:vmware:vcenter_server::::

Rows per page:

1-10 of 381

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "VMware vCenter Server",
    "vendor": "VMware",
    "versions": [
      {
        "lessThan": "8.0U2",
        "status": "affected",
        "version": "8.0",
        "versionType": "8.0U2"
      },
      {
        "lessThan": "7.0U3o",
        "status": "affected",
        "version": "7.0",
        "versionType": "7.0U3o"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "VMware Cloud Foundation (VMware vCenter Server)",
    "vendor": "VMware",
    "versions": [
      {
        "status": "affected",
        "version": "5.x"
      },
      {
        "status": "affected",
        "version": "4.x"
      }
    ]
  }
]