CVE-2023-34058
published 2023-10-27CVE-2023-34058: VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges…
high7.5CVSS 3.1
AVAACHPRNUINSUCHIHAH
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | open-vm-tools | < open-vm-tools 2:12.2.0-1+deb12u2 (bookworm) | open-vm-tools 2:12.2.0-1+deb12u2 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| msrc | cbl2_open-vm-tools_11.3.0-3_on_cbl_mariner_2.0 | — | — |
| paloalto | pan-os | — | — |
| vmware | open-vm-tools | >= 0 < 2:11.2.5-2+deb11u3 | 2:11.2.5-2+deb11u3 |
| vmware | open-vm-tools | >= 0 < 2:12.2.0-1+deb12u2 | 2:12.2.0-1+deb12u2 |
| vmware | open-vm-tools | >= 0 < 2:12.3.5-1 | 2:12.3.5-1 |
| vmware | open-vm-tools | >= 0 < 2:12.3.5-1 | 2:12.3.5-1 |
| vmware | open-vm-tools | >= 0 < 2:11.3.0-2ubuntu0~ubuntu20.04.7 | 2:11.3.0-2ubuntu0~ubuntu20.04.7 |
| vmware | open-vm-tools | >= 0 < 2:12.1.5-3~ubuntu0.22.04.4 | 2:12.1.5-3~ubuntu0.22.04.4 |
| vmware | open-vm-tools | >= 0 < 2:10.2.0-3~ubuntu0.16.04.1+esm4 | 2:10.2.0-3~ubuntu0.16.04.1+esm4 |
| vmware | open-vm-tools | >= 0 < 2:11.0.5-4ubuntu0.18.04.3+esm3 | 2:11.0.5-4ubuntu0.18.04.3+esm3 |
| vmware | open_vm_tools | 11.0.0 – 12.3.0 | — |
| vmware | tools | >= 10.3.0 < 12.3.5 | 12.3.5 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
osv7.5HIGH