Exploit for Incorrect Authorization in Vmware Aria_Operations_For_Logs

🗓️ 20 Oct 2023 14:59:45Reported by horizon3aiType

VMware Aria Operations For Logs CVE-2023-34051 bypasses authentication and creates reverse shell using CVEs. Mitigate using VMSA-2023-0021

Reporter	Title	Published	Views	Family All 69
0day.today	VMware vRealize Log Insight Unauthenticated Remote Code Execution Exploit	11 Sep 202300:00	–	zdt
Information Security Automation	October 2023: back to Positive Technologies, Vulristics updates, Linux Patch Wednesday, Microsoft Patch Tuesday, PhysTech VM lecture	5 Nov 202318:39	–	avleonov
BDU FSTEC	The vulnerability of the log management tool vRealize Log Insight and the VMware Cloud Foundation virtualization platform lies in their ability to bypass the catalog, allowing attackers to execute arbitrary code.	26 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the log management tool vRealize Log Insight and the VMware Cloud Foundation virtualization platform, related to access control errors, allows a perpetrator to execute arbitrary code.	27 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the vRealize Log Insight log management tool lies in the lack of protection for operational data, which allows a malicious individual to gain unauthorized access to the device.	15 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Aria Operations for Logs network log analysis tool relates to the possibility of bypassing authentication, allowing an attacker to execute arbitrary code.	23 Oct 202300:00	–	bdu_fstec
Circl	CVE-2022-31704	25 Jan 202308:13	–	circl
Circl	CVE-2022-31706	25 Jan 202308:13	–	circl
Circl	CVE-2022-31711	25 Jan 202313:47	–	circl
Circl	CVE-2023-34051	20 Oct 202319:16	–	circl