CVE-2023-20867

Produto

VMware / Tools

Vulnerabilidade

VMware Tools Authentication Bypass Vulnerability

Adicionado ao KEV

23 de jun. de 2023

Corrigir até

14 de jul. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.

Ação necessária

Apply updates per vendor instructions.

Notas

https://www.vmware.com/security/advisories/VMSA-2023-0013.html; https://nvd.nist.gov/vuln/detail/CVE-2023-20867