Vulnerabilities CVE-2023-20867

CVE-2023-20867

Medium

Open

KEV

TLP:CLEAR

VMware Tools Authentication Bypass Vulnerability

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

VMware — Tools — VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.

Details

EPSS Score ⓘ: 13.53%

96.1th percentile
Confidence: 100%
CISA KEV
Date Added: Jun 23, 2023
Patch Due: Jul 14, 2023
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.