Vulnerability CVE-2023-20887


Published: 2023-06-07

Description:
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

See advisories in our WLB2 database:
Topic
Author
Date
High
VMWare Aria Operations For Networks Remote Command Execution
h00die
26.07.2023

Type:

CWE-78

(Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') )

 References:
https://www.vmware.com/security/advisories/VMSA-2023-0012.html

Copyright 2024, cxsecurity.com

 

Back to Top