VMware.Aria.Operations.CVE-2023-20887.Command.Injection

Description

This indicates an attack attempt to exploit a Command Injection vulnerability in VMware Aria Operations.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the post request. A remote attacker may be able to exploit this to execute arbitrary commands within the context of the application, via a crafted post request.

Outbreak Alert

VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution. According to the vendor advisory, the vulnerability has been seen exploited in the wild.

View the full Outbreak Alert Report

Affected Products

VMware Aria Operations Networks 6.2.0 to 6.10.0

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://www.vmware.com/security/advisories/VMSA-2023-0012.html