CVE-2023-34043
First published: Tue Sep 26 2023(Updated: )
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'.
Credit: security@vmware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware vRealize Operations | =8.6.0 | |
| VMware vRealize Operations | =8.10.0 | |
| VMware vRealize Operations | =8.12.0 | |
| VMware vRealize Operations | =8.12.0-hotfix1 | |
| VMware vRealize Operations | =8.12.0-hotfix2 | |
| VMware vRealize Operations | =8.12.0-hotfix3 | |
| VMware vCenter Server and Cloud Foundation | >=4.0<4.4 | |
| VMware vCenter Server and Cloud Foundation | =5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for the local privilege escalation vulnerability in VMware Aria Operations?
The vulnerability ID is CVE-2023-34043.
What is the severity of the CVE-2023-34043 vulnerability?
The severity of the CVE-2023-34043 vulnerability is medium.
Which version of VMware Aria Operations is affected by CVE-2023-34043?
Versions 8.6.0, 8.10.0, 8.12.0, 8.12.0-hotfix1, 8.12.0-hotfix2, and 8.12.0-hotfix3 of VMware Aria Operations are affected by CVE-2023-34043.
How can a malicious actor exploit the CVE-2023-34043 vulnerability?
A malicious actor with administrative access to the local system can escalate privileges to 'root' using CVE-2023-34043.
Where can I find more information about CVE-2023-34043?
You can find more information about CVE-2023-34043 at the following link: https://www.vmware.com/security/advisories/VMSA-2023-0020.html
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/severity
- agent/weakness
- agent/remedy
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- agent/author
- vendor/vmware
- canonical/vmware vrealize operations
- version/vmware vrealize operations/8.6.0
- version/vmware vrealize operations/8.10.0
- version/vmware vrealize operations/8.12.0
- version/vmware vrealize operations/8.12.0-hotfix1
- version/vmware vrealize operations/8.12.0-hotfix2
- version/vmware vrealize operations/8.12.0-hotfix3
- canonical/vmware vcenter server and cloud foundation
- version/vmware vcenter server and cloud foundation/4.0
- version/vmware vcenter server and cloud foundation/5.0