PT-2023-6318 · Vmware · Vmware Aria Operations For Logs

James Horseman · Publicado 2023-10-19 · Atualizado 2026-03-08 · CVE-2023-34051

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Aria Operations for Logs (affected versions not specified)

Description The issue is related to an authentication bypass vulnerability in VMware Aria Operations for Logs. This vulnerability can be exploited by an unauthenticated, malicious actor to inject files into the operating system of an impacted appliance, resulting in remote code execution. It is estimated that around 139 devices are affected, mainly distributed in Singapore, South Africa, and other countries. A proof-of-concept exploit for this vulnerability has been released, and VMware has warned customers about its existence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Authentication

Incorrect Authorization

Enumeração de Fraquezas

CWE-287

CWE-863

Identificadores relacionados

BDU:2023-07029

CVE-2023-34051

Produtos afetados

Vmware Aria Operations For Logs

Referências · 34

• 🔥 https://github.com/horizon3ai/CVE-2023-34051 · Exploit
• https://t.me/cybersecuritytechnologies/9238 · Publicação no Telegram
• https://twitter.com/Horizon3ai/status/1717922114244591783 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-34051 · Aviso do Fabricante
• https://twitter.com/reverseame/status/1733209338775302494 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-34051 · Nota de Segurança
• https://twitter.com/computerauditor/status/2030613908122382589 · Publicação no Twitter
• https://t.me/proxy_bar/1788 · Publicação no Telegram
• https://twitter.com/catnap707/status/1716932549518483665 · Publicação no Twitter
• https://twitter.com/XynikIT/status/1716835916948603070 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1715225899992551619 · Publicação no Twitter
• https://t.me/ckure/13087 · Publicação no Telegram
• https://twitter.com/fletch_ai/status/1717407473357709602 · Publicação no Twitter
• https://twitter.com/TheNimbleNerd/status/1716834832926576844 · Publicação no Twitter
• https://t.me/true_secator/5005 · Publicação no Telegram