Rewterz Threat Advisory – CVE-2023-20877 – VMware Aria Operations Vulnerability

Severity

High

Analysis Summary

CVE-2023-20877

VMware Aria Operations could allow a remote authenticated attacker to gain elevated privileges on the system, caused by an unspecified flaw. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to execute arbitrary code with elevated privileges.

Impact

• Privilege Escalation

Indicators Of Compromise

CVE

• CVE-2023-20877

Affected Vendors

VMware

Affected Products

• VMware Cloud Foundation 4.0

Remediation

VMware Security Advisory