CVE-2023-34051
Published: 20 October 2023
Summary
CVE-2023-34051 is a critical-severity Incorrect Authorization (CWE-863) vulnerability in Vmware Aria Operations For Logs. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 1.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
VMware Aria Operations for Logs contains an authentication bypass vulnerability, identified as CVE-2023-34051 with a CVSS v3.1 score of 9.8. The issue is associated with CWE-863 and affects the appliance's authorization mechanisms, enabling unauthorized interaction with the underlying operating system.
An unauthenticated remote attacker can exploit the flaw to inject files into the appliance operating system, resulting in remote code execution with full confidentiality, integrity, and availability impact.
The referenced VMware advisory VMSA-2023-0021 at https://www.vmware.com/security/advisories/VMSA-2023-0021.html addresses the vulnerability and associated remediation steps.
The EPSS score reached a peak of 0.7183 with a current value of 0.6090.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-38168
Vulnerability details
VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Periodic review and update of procedures reduces incorrect authorization implementations over time.
Supervision identifies cases where authorization logic incorrectly permits unauthorized actions.
Defining permitted attribute values and auditing modifications reduces the chance of incorrect authorization outcomes due to tampered or missing labels.
The authorization process and usage restrictions help prevent incorrect authorization for remote access types.
Establishing configuration and connection requirements helps ensure correct rather than incorrect authorization for wireless access.
Establishing connection authorization processes for mobile devices helps ensure authorization decisions are correctly implemented rather than incorrect.
Monitoring account use, notifying on changes, and reviewing accounts for compliance corrects incorrect authorization assignments.
Ensures authorization decisions for external system use are correctly implemented and enforced.