CVE-2023-20889
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jun 7, 2023
Updated: Jan 7, 2025
CWE ID 77
Summary
CVE-2023-20889 is a newly disclosed information disclosure vulnerability affecting VMware Aria Operations for Networks. An attacker with network access to this system can execute a command injection attack, potentially resulting in the exposure of sensitive information. This vulnerability could pose a significant risk to organizations relying on Aria Operations for Networks for their network security management. VMware urges users to apply the available patch to mitigate this issue and secure their networks against potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- VMware Aria Operations for Networks
Affected Vendors
- VMware Inc.