Advisory ROSA-SA-2023-2242

Software: open-vm-tools 11.0.5
OS: rosa-server79

package_evr_string: open-vm-tools-11.0.5-2.rv3.src.rpm

CVE-ID: CVE-2023-20900
BDU-ID: 2023-05064
CVE-Crit: MEDIUM
CVE-DESC.: A vulnerability in the VMware Tools suite of utilities is related to the ability to bypass the SAML token signature. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges by implementing a man-in-the-middle attack
CVE-STATUS: Resolved
CVE-REV: To close, run the yum update open-vm-tools command