Vulnerability Intelligence Report
CVE-2023-34051
VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:44.67%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-863 ↗CWE-863 Incorrect Authorization
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| vmware | aria_operations_for_logs | 4.0, 5.0, 8.6, 8.8, 8.10, 8.10.2, 8.12 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
44.667%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | VMware by Broadcom · Vendor · USA |
| Reserved | 2023-05-25T17:21:56 |
| Published | 2023-10-20T04:11:52 |
| Last Updated | 2025-05-02T18:30:37 |
Community Chatter & Buzz