Detections
Analytics
CVE-2023-20864
critical
Description
VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root.
From the Tenable Blog
CVE-2023-20864: VMware Aria Operations for Logs Deserialization Vulnerability
Published: 2023-04-21
VMware issues advisory to address two flaws in its VMware Aria Operations for Logs solution, including a critical deserialization flaw assigned a CVSSv3 score of 9.8.
References
https://www.vmware.com/security/advisories/VMSA-2023-0007.html