critical
9.9
CWE
862
Advisory Published
Updated

CVE-2023-34063

First published: Tue Jan 16 2024(Updated: )

Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows.

Credit: security@vmware.com

Affected SoftwareAffected VersionHow to fix
VMware Aria Automation=8.11.0
VMware Aria Automation=8.11.1
VMware Aria Automation=8.11.2
VMware Aria Automation=8.12.0
VMware Aria Automation=8.12.1
VMware Aria Automation=8.12.2
VMware Aria Automation=8.13.0
VMware Aria Automation=8.13.1
VMware Aria Automation=8.14.0
VMware Aria Automation=8.14.1
VMware Cloud Foundation=4.0
VMware Cloud Foundation=5.0
Atlassian Confluence Server/Data Center=8
Atlassian Confluence Server and Data Server=8
Atlassian Jira Software Data Center=8.20.0
Atlassian Jira Software Data Center=9.4.0
Atlassian Jira Software Data Center=9.5.0
Atlassian Jira Software Data Center=9.6.0
VMware Aria Automation=8.16

Remedy

https://www.vmware.com/security/advisories/VMSA-2024-0001.html

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Peer vulnerabilities

(Found alongside the following vulnerabilities)

Frequently Asked Questions

  • What is the severity of CVE-2023-34063?

    CVE-2023-34063 has a high severity rating due to its exploitation potential leading to unauthorized access.

  • How do I fix CVE-2023-34063?

    To fix CVE-2023-34063, apply the latest security patches provided by VMware and Atlassian for affected software products.

  • What software products are affected by CVE-2023-34063?

    CVE-2023-34063 affects products such as VMware Aria Automation and certain versions of Atlassian Confluence and Jira Software Data Center.

  • Who can exploit CVE-2023-34063?

    An authenticated malicious actor can exploit CVE-2023-34063 to gain unauthorized access.

  • What does the vulnerability CVE-2023-34063 entail?

    CVE-2023-34063 involves a Missing Access Control vulnerability, allowing unauthorized access to remote organizations and workflows.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203