Exploit found in the wild for Critical VMware Aria Operations Bug

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary An exploit has surfaced for CVE-2023-20864, a highly significant security vulnerability within the VMware Aria Operations for Logs analysis tool utilized in cloud management. This exploit empowers...

CVE-2023-20864

creationtimestamp| type| source ---|---|--- 2023-04-21 00:31:07+00:00| seen| https://t.me/cibsecurity/62562 2023-04-21 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1015 2023-04-21 12:42:39+00:00| seen| https://t.me/truesecator/4310 2023-04-21 14:11:24+00:00| seen|...

CVE-2023-20864

VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root...

CVE-2023-20864

CVE-2023-20864 affects VMware Aria Operations for Logs. The NUCLEI template and multiple sources describe an unauthenticated deserialization vulnerability that enables remote code execution as root when the system is network-accessible. Impact is described as arbitrary code execution with root pr...

VMSA-2023-0007:VMware Aria Operations for Logs (Operations for Logs) update addresses multiple vulnerabilities.

Advisory ID: VMSA-2023-0007.1 CVSSv3 Range: 7.2-9.8 Issue Date:2023-04-20 Updated On: 2023-07-10 CVEs: CVE-2023-20864, CVE-2023-20865 Synopsis: VMware Aria Operations for Logs Operations for Logs update addresses multiple vulnerabilities. CVE-2023-20864, CVE-2023-20865 RSS Feed Download PDF...