CVE-2023-20865

VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrary commands as root.

Score

CVSS 3.1 7.2 High

Status

Modified - security@vmware.com

Published

2023-04-20

Last modified

2025-02-05

Weaknesses

CWE-77

Affected products

• Aria Operations For Logs (Vmware)
• Cloud Foundation (Vmware)

References

• https://www.vmware.com/security/advisories/VMSA-2023-0007.html