CVE-2023-20878

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system.

Score

CVSS 3.1 7.2 High

Status

Modified - security@vmware.com

Published

2023-05-12

Last modified

2025-01-27

Weaknesses

CWE-502

Affected products

• Cloud Foundation (Vmware)
• Vrealize Operations (Vmware)

References

• https://www.vmware.com/security/advisories/VMSA-2023-0009.html