← Back

CVE-2023-20900

nvd nist
Published: Aug 31, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.6 / Impact: 5.9
Source: NVD

Description

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .

Affected (10)

Show all products
Vmware: Tools, Open Vm Tools · Fedoraproject: Fedora · Debian: Debian Linux · Netapp: Ontap Select Deploy Administration Utility
Vmware
2 products
Tools
Open Vm Tools
Fedoraproject
1 product
Fedora
Debian
1 product
Debian Linux
Netapp
1 product
Ontap Select Deploy Administration Utility
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tools
From 10.3.0 to 12.3.0
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Tools
From 10.3.0 to 10.3.26
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Open Vm Tools
From 10.3.0 to 12.3.0
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Configuration D
3 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 37
Fedora
Version 38
Fedora
Version 39
Configuration E
3 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 10.0
Debian Linux
Version 11.0
Debian Linux
Version 12.0
Configuration F
1 vulnerable
Vulnerable SoftwareAffected Versions
Ontap Select Deploy Administration Utility
All versions

Related CWEs

CWE-294
Authentication Bypass by Capture-replay
A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

References (18)

Source: security@vmware.com
Mailing ListThird Party Advisory
Source: security@vmware.com
Mailing ListPatch
Source: security@vmware.com
Mailing List
Source: security@vmware.com
Mailing List
Source: security@vmware.com
Mailing List
Source: security@vmware.com
Mailing List
Source: security@vmware.com
Third Party Advisory
Source: security@vmware.com
Third Party Advisory
Source: security@vmware.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.