CVE-2023-20867
CVSS 3.1 Score 3.9 of 10 (low)
Details
Published Jun 13, 2023
Updated: Jun 27, 2024
CWE ID 287
Summary
CVE-2023-20867 is a recently disclosed vulnerability affecting VMware ESXi hosts. Successful exploitation of this weakness enables an adversary to force VMware Tools to fail authentication during host-to-guest operations. This can significantly impact the confidentiality and integrity of guest virtual machines by preventing secure data exchange and potentially introducing unauthorized access. Overall, this vulnerability could lead to severe consequences in enterprise environments where virtual machines handle sensitive data.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- VMware Tools
- Debian
- Fedora Operating System
Affected Vendors
- Debian
- Fedora Project
- VMware Inc.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
Note: This is just a basic overview providing quick insights into CVE-2023-20867 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions