VMwareVMSA-2023-0021VMware Aria Operations for Logs updates address multiple vulnerabilities. (CVE-2023-34051, CVE-2023-34052)
0.002 Low
EPSS
Percentile
54.1%
3a. Authentication Bypass Vulnerability (CVE-2023-34051)
VMware Aria Operations for Logs contains an authentication bypass vulnerability VMware has evaluated the severity of this issue to be in the Important Severity Range with a maximum CVSSv3 base score of 8.1.
3b. Deserialization Vulnerability (CVE-2023-34052)
VMware Aria Operations for Logs contains a deserialization vulnerability. VMware has evaluated the severity of this issue to be in the Important Severity Range with a maximum CVSSv3 base score of 8.1.
References
customerconnect.vmware.com/en/downloads/info/slug/infrastructure_operations_management/vmware_aria_operations_for_logs/8_14
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34051
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34052
docs.vmware.com/en/VMware-Aria-Operations-for-Logs/8.14/rn/vmware-aria-operations-for-logs-814-release-notes/index.html
kb.vmware.com/s/article/95212
www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Related
