CVE ID
CVE-2023-20867
Vulnerability Name
VMware Tools Authentication Bypass Vulnerability
- Project: VMware
- Product: Tools
Date
- Date Added: 2023-06-23
- Due Date: 2023-07-14
Description
VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.
Known To Be Used in Ransomware Campaigns?
Unknown
Action
Apply updates per vendor instructions.
Additional Notes
https://www.vmware.com/security/advisories/VMSA-2023-0013.html; https://nvd.nist.gov/vuln/detail/CVE-2023-20867
Related Security News
- Chinese cyberspies breach Singapore's four largest telcos
- UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in Long-Term Spying
Top comments (0)