Lucene search

K
vmwareVMwareVMSA-2023-0009
HistoryMay 11, 2023 - 12:00 a.m.

VMware Aria Operations update addresses multiple Local Privilege Escalations and a Deserialization issue (CVE-2023-20877, CVE-2023-20878, CVE-2023-20879, CVE-2023-20880)

2023-05-1100:00:00
www.vmware.com
21
vmware
aria operations
update
privilege escalations
deserialization
cve-2023-20877
cve-2023-20878
cve-2023-20879
cve-2023-20880
local
severity

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

42.6%

3a. VMware Aria Operations Privilege Escalation Vulnerability (CVE-2023-20877)

VMware Aria Operations contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.8.

3b. VMware Aria Operations Deserialization Vulnerability (CVE-2023-20878)

VMware Aria Operations contains a deserialization vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 6.6.

3c. VMware Aria Operations Local Privilege Escalation Vulnerability (CVE-2023-20879)

VMware Aria Operations contains multiple Local Privilege Escalation vulnerabilities. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 6.7.

3d. VMware Aria Operations Local Privilege Escalation Vulnerability (CVE-2023-20880)

VMware Aria Operations contains a local privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 6.4.

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

42.6%

Related for VMSA-2023-0009