CVE-2023-34051: Critical severity vmware vrealize operations vulnerability
VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-34051.
What is the severity of CVE-2023-34051?
The severity of CVE-2023-34051 is critical with a CVSS score of 9.8.
Which software versions of VMware Aria Operations for Logs are affected by CVE-2023-34051?
The versions 4.0, 5.0, 8.6, 8.8, 8.10, 8.10.2, and 8.12 of VMware Aria Operations for Logs are affected by CVE-2023-34051.
What is the impact of CVE-2023-34051?
CVE-2023-34051 allows an unauthenticated attacker to inject files into the operating system of an impacted appliance, which can result in remote code execution.
Where can I find more information about CVE-2023-34051?
You can find more information about CVE-2023-34051 at the following link: [link](https://www.vmware.com/security/advisories/VMSA-2023-0021.html)