PT-2023-6488 · Vmware+10 · Vmware Tools+10

Publicado 2023-10-26 · Atualizado 2024-06-15 · CVE-2023-34058

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Tools (affected versions not specified)

Description VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Privilege Assignment

Improper Authorization

Improper Verification of Cryptographic Signature

Enumeração de Fraquezas

CWE-266

CWE-285

CWE-347

Identificadores relacionados

ALSA-2023:7265

ALSA-2023:7277

ALT-PU-2023-6667

ALT-PU-2024-1233

ALT-PU-2024-1863

ALT-PU-2024-3160

AZL-31718

BDU:2023-07234

BDU:2024-02571

CESA-2023_7265

CESA-2023_7279

CVE-2023-34058

DLA-3646-1

DSA-5543-1

MGASA-2024-0058

OESA-2023-1831

OESA-2023-1832

OESA-2023-1833

OPENSUSE-SU-2023_4227-1

OPENSUSE-SU-2024:13374-1

RHSA-2023:7260

RHSA-2023:7261

RHSA-2023:7262

RHSA-2023:7263

RHSA-2023:7264

RHSA-2023:7265

RHSA-2023:7267

RHSA-2023:7276

RHSA-2023:7277

RHSA-2023:7279

RHSA-2023_7265

RHSA-2023_7277

RHSA-2023_7279

RLSA-2023:7265

SUSE-SU-2023:4227-1

SUSE-SU-2023:4228-1

SUSE-SU-2023:4229-1

SUSE-SU-2023:4230-1

SUSE-SU-2023_4227-1

SUSE-SU-2023_4228-1

SUSE-SU-2023_4229-1

SUSE-SU-2023_4230-1

USN-6463-1

USN-6463-2

Produtos afetados

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Vmware Tools

Referências · 89

• https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5 · Nota
• https://bugzilla.suse.com/1216433 · Nota
• https://twitter.com/VulmonFeeds/status/1717854022101549532 · Publicação no Twitter
• https://osv.dev/vulnerability/SUSE-SU-2023:4228-1 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=2246096 · Nota
• https://osv.dev/vulnerability/OESA-2023-1832 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-6463-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-34058 · Aviso do Fabricante
• https://osv.dev/vulnerability/DLA-3646-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2023/suse-su-20234227-1 · Nota
• https://osv.dev/vulnerability/USN-6463-2 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2023:4229-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2023-1833 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-6463-1 · Aviso do Fabricante
• https://openwall.com/lists/oss-security/2023/10/27/2 · Nota