CVE-2023-20889

2023-06-0714:20:14

vmware

www.cve.org

aria operations

networks

information disclosure

vulnerability

command injection

8.1 High

AI Score

Confidence

High

0.488 Medium

EPSS

Percentile

97.5%

JSON

Aria Operations for Networks contains an information disclosure vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in information disclosure.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Aria Operations for Networks (Formerly vRealize Network Insight)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Aria Operations for Networks (Formerly vRealize Network Insight) 6.x"
      }
    ]
  }
]