Lucene search
HistoryOct 25, 2023 - 6:17 p.m.
CVE-2023-34056
vcenter server
information disclosure
unauthorized access
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.6
Confidence
High
EPSS
0
Percentile
9.8%
vCenter Server contains a partial information disclosure vulnerability. A malicious actor with non-administrative privileges to vCenter Server may leverage this issue to access unauthorized data.
Affected configurations
Node
vmwarevcenter_serverRange4.0–5.5
ORvmwarevcenter_serverMatch7.0-
ORvmwarevcenter_serverMatch7.0a
ORvmwarevcenter_serverMatch7.0b
ORvmwarevcenter_serverMatch7.0c
ORvmwarevcenter_serverMatch7.0d
ORvmwarevcenter_serverMatch7.0update1
ORvmwarevcenter_serverMatch7.0update1a
ORvmwarevcenter_serverMatch7.0update1c
ORvmwarevcenter_serverMatch7.0update1d
ORvmwarevcenter_serverMatch7.0update2
ORvmwarevcenter_serverMatch7.0update2a
ORvmwarevcenter_serverMatch7.0update2b
ORvmwarevcenter_serverMatch7.0update2c
ORvmwarevcenter_serverMatch7.0update2d
ORvmwarevcenter_serverMatch7.0update3
ORvmwarevcenter_serverMatch7.0update3a
ORvmwarevcenter_serverMatch7.0update3c
ORvmwarevcenter_serverMatch7.0update3d
ORvmwarevcenter_serverMatch7.0update3e
ORvmwarevcenter_serverMatch7.0update3f
ORvmwarevcenter_serverMatch7.0update3g
ORvmwarevcenter_serverMatch7.0update3h
ORvmwarevcenter_serverMatch7.0update3i
ORvmwarevcenter_serverMatch7.0update3j
ORvmwarevcenter_serverMatch7.0update3k
ORvmwarevcenter_serverMatch7.0update3l
ORvmwarevcenter_serverMatch7.0update3m
ORvmwarevcenter_serverMatch7.0update3n
ORvmwarevcenter_serverMatch8.0-
ORvmwarevcenter_serverMatch8.0a
ORvmwarevcenter_serverMatch8.0b
ORvmwarevcenter_serverMatch8.0c
ORvmwarevcenter_serverMatch8.0update1
ORvmwarevcenter_serverMatch8.0update1a
ORvmwarevcenter_serverMatch8.0update1b
ORvmwarevcenter_serverMatch8.0update1c
ORvmwarevcenter_serverMatch8.0update1d
Related
attackerkb
attackerkb
CVE-2023-34056
2023-10-25 00:00:00
cve
cve
CVE-2023-34056
2023-10-25 18:17:27
nessus
nessus
cvelist
cvelist
prion
prion
Information disclosure
2023-10-25 18:17:00
vulnrichment
vulnrichment
vmware
vmware
malwarebytes
malwarebytes
Update vCenter Server now! VMWare fixes critical vulnerability
2023-10-25 06:44:54
hivepro
hivepro
Vmware vCenter Flaws Leading to RCE Attacks
2023-10-27 13:16:58
thn
thn
Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability
2023-10-25 10:11:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.6
Confidence
High
EPSS
0
Percentile
9.8%
Related for NVD:CVE-2023-34056