Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-20865

VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrar

Description

VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrary commands as root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a VMware Aria Operations for Logs (formerly vRealize Log Insight)

  • VMware Aria Operations for Logs (formerly vRealize Log Insight) prior to 8.12affected

References