CVE-2023-34051

State: Published
Severity: 9.8 Critical
Published: Oct 20, 2023
Updated: May 2, 2025
Reserved: May 25, 2023

Description

VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
VMware Aria Operations for Logsn/a	VMware Aria Operations for Logs 8.x, VMware Cloud Foundation (VMware Aria Operations for Logs) 5.x 4.x Affected

References

https://www.vmware.com/security/advisories/VMSA-2023-0021.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.