VMware vRealize Operations Multiple Vulnerabilities (VMSA-2023-0009)

The version of VMware vRealize Operations vROps running on the remote host is missing a vendor supplied patch. It is, therefore, affected by multiple vulnerabilities: - VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly privileges c...

CVE-2023-20878

creationtimestamp| type| source ---|---|--- 2023-05-13 00:27:10+00:00| seen| https://t.me/cibsecurity/64059...

CVE-2023-20878

CVE-2023-20878 affects VMware Aria Operations (formerly vRealize Operations). The connected sources describe a deserialization vulnerability that allows a malicious actor with administrative privileges to execute arbitrary commands and disrupt the system. Exploitation details in the VMSA-2023-000...

VMSA-2023-0009:VMware Aria Operations update addresses multiple Local Privilege Escalations and a Deserialization issue

Advisory ID: VMSA-2023-0009 CVSSv3 Range: 6.4-8.8 Issue Date:2023-05-11 Updated On: 2023-05-11 Initial Advisory CVEs: CVE-2023-20877, CVE-2023-20878, CVE-2023-20879, CVE-2023-20880 Synopsis: VMware Aria Operations update addresses multiple Local Privilege Escalations and a Deserialization issue...