CVE-2023-20891
CVSS Score of 10 (low)
Details
Summary
CVE-2023-20891 is an information disclosure vulnerability found in the VMware Tanzu Application Service for VMs and Isolation Segment. The vulnerability arises from the logging of credentials in hex encoding in platform system audit logs. If a non-admin user gains access to these logs, they can retrieve hex encoded CF API admin credentials and potentially push malicious versions of an application. However, in a default deployment, non-admin users are not granted access to the platform system audit logs. The vulnerability has a base severity rating of MEDIUM and a base score of 6.5 according to both [email protected] and [email protected].
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions