PT-2023-6318 · Vmware · Vmware Aria Operations For Logs

James Horseman · Published 2023-10-19 · Updated 2026-03-08 · CVE-2023-34051

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Aria Operations for Logs (affected versions not specified)

Description The issue is related to an authentication bypass vulnerability in VMware Aria Operations for Logs. This vulnerability can be exploited by an unauthenticated, malicious actor to inject files into the operating system of an impacted appliance, resulting in remote code execution. It is estimated that around 139 devices are affected, mainly distributed in Singapore, South Africa, and other countries. A proof-of-concept exploit for this vulnerability has been released, and VMware has warned customers about its existence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Authentication

Incorrect Authorization

Weakness Enumeration

CWE-287

CWE-863

Related Identifiers

BDU:2023-07029

CVE-2023-34051

Affected Products

Vmware Aria Operations For Logs

References · 34

• 🔥 https://github.com/horizon3ai/CVE-2023-34051 · Exploit
• https://osv.dev/vulnerability/CVE-2023-34051 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34051 · Security Note
• https://bdu.fstec.ru/vul/2023-07029 · Security Note
• https://vmware.com/security/advisories/VMSA-2023-0021.html · Vendor Advisory
• https://t.me/cybersecuritytechnologies/9238 · Telegram Post
• https://twitter.com/Horizon3ai/status/1717922114244591783 · Twitter Post
• https://twitter.com/reverseame/status/1733209338775302494 · Twitter Post
• https://twitter.com/computerauditor/status/2030613908122382589 · Twitter Post
• https://t.me/proxy_bar/1788 · Telegram Post
• https://twitter.com/catnap707/status/1716932549518483665 · Twitter Post
• https://twitter.com/XynikIT/status/1716835916948603070 · Twitter Post
• https://twitter.com/CVEnew/status/1715225899992551619 · Twitter Post
• https://t.me/ckure/13087 · Telegram Post
• https://twitter.com/fletch_ai/status/1717407473357709602 · Twitter Post