CVE-2023-34043

2023-09-2617:14:36

vmware

www.cve.org

vmware

aria operations

privilege escalation

vulnerability

root access

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to ‘root’.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "VMware Aria Operations",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Aria Operations 8.12.x, 8.10.x, 8.6.x, VCF 5.x, 4.x"
      }
    ]
  }
]