Rewterz Threat Advisory – CVE-2023-20856 – VMware vRealize Operations (vROps) Vulnerability

Severity

Medium

Analysis Summary

CVE-2023-20856

VMware vRealize Operations (vROps) is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to perform unauthorized actions. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities.

Impact

• Unauthorized Access

Indicators Of Compromise

CVE

• CVE-2023-20856

Affected Vendors

VMware

Affected Products

• VMware vRealize Operations (vROps) 8.6

Remediation

Refer to VMware Security Advisory for patch, upgrade or suggested workaround information.

VMware Security Advisory