CVE-2023-34043

Published: Sep 27, 2023Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'.

Affected (8)

Products: Vmware: Aria Operations, Cloud Foundation

Vmware

2 products

Aria Operations

Cloud Foundation

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Vmware Aria Operations	Version 8.10.0
Vmware Aria Operations	Version 8.12.0
Vmware Aria Operations	Version 8.12.0 hotfix1
Vmware Aria Operations	Version 8.12.0 hotfix2
Vmware Aria Operations	Version 8.12.0 hotfix3
Vmware Aria Operations	Version 8.6.0
Vmware Cloud Foundation	From 4.0 to 4.4
Vmware Cloud Foundation	Version 5.0

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://www.vmware.com/security/advisories/VMSA-2023-0020.html

Source: security@vmware.com

PatchVendor Advisory

https://www.vmware.com/security/advisories/VMSA-2023-0020.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.