CVE-2023-20879

published 2023-05-12

CVE-2023-20879: VMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor with administrative privileges in the Aria Operations application…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

VMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor with administrative privileges in the Aria Operations application can gain root access to the underlying operating system.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
vmware	cloud_foundation	4.0 – 4.5	—
vmware	vrealize_operations	—	—
vmware	vrealize_operations	—	—