VMware Aria Operations Deserialization Vulnerability

VMware Aria Operations Deserialization Vulnerability

On May 01, 2023, a Vmware deserialization vulnerability has been released.

According to the released report, VMware Aria Operations for Logs contains a deserialization vulnerability and unauthenticated, malicious actors with network access to VMware Aria Operations for Logs may possibly execute arbitrary code as root. ( CVE-2023-20864 )

Affected Systems

• cpe:2.3:a:vmware:aria_operations_for_logs:*:*:*:*:*:*:*:* From (including) 8.10.2 Up to (excluding) 8.12.0
• cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*From (including) 4.0 up to (excluding) 4.5

IoC’s

-

Recommended Solution(s)

Vmware recommends upgrading to the fixed version as documented in the advisory.

Mitigations

-

CVE / CWE

CVE-2023-20864

Related Website(s)

• https://www.vmware.com/security/advisories/VMSA-2023-0007.html
• https://nvd.nist.gov/vuln/detail/CVE-2023-20864

* Vulnerabilities with a CVSS 3.1 score between 7.0 and 8.9 are evaluated to be “high” whereas vulnerabilities with a CVSS 3.1 score between 9.0 and 10.0 are evaluated to be “critical”.