CVE-2023-34058

2023-10-2705:15:38

Debian Security Bug Tracker

security-tracker.debian.org

vmware tools

saml token

signature

bypass

vulnerability

guest operation privileges

target virtual machine

elevate privileges

guest alias

7.5 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

45.0%

JSON

VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .

OSVersionArchitecturePackageVersionFilename
Debian12allopen-vm-tools< 2:12.2.0-1+deb12u2open-vm-tools_2:12.2.0-1+deb12u2_all.deb
Debian11allopen-vm-tools< 2:11.2.5-2+deb11u3open-vm-tools_2:11.2.5-2+deb11u3_all.deb
Debian10allopen-vm-tools< 2:10.3.10-1+deb10u6open-vm-tools_2:10.3.10-1+deb10u6_all.deb
Debian999allopen-vm-tools< 2:12.3.5-1open-vm-tools_2:12.3.5-1_all.deb
Debian13allopen-vm-tools< 2:12.3.5-1open-vm-tools_2:12.3.5-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	open-vm-tools	< 2:12.2.0-1+deb12u2	open-vm-tools_2:12.2.0-1+deb12u2_all.deb
Debian	11	all	open-vm-tools	< 2:11.2.5-2+deb11u3	open-vm-tools_2:11.2.5-2+deb11u3_all.deb
Debian	10	all	open-vm-tools	< 2:10.3.10-1+deb10u6	open-vm-tools_2:10.3.10-1+deb10u6_all.deb
Debian	999	all	open-vm-tools	< 2:12.3.5-1	open-vm-tools_2:12.3.5-1_all.deb
Debian	13	all	open-vm-tools	< 2:12.3.5-1	open-vm-tools_2:12.3.5-1_all.deb