CVE-2023-34060

Katalog CVE

CVSS 9.8 · Critical EPSS 1,3%

Kerentanan Missing Authentication for Critical Function pada vmware cloud director. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 10.5 from an older version. On an upgraded version of VMware Cloud Director Appliance 10.5, a malicious actor with network access to the appliance can bypass login restrictions when authenticating on port 22 (ssh) or port 5480 (appliance management console) . This bypass is not present on port 443 (VCD provider and tenant login). On a new installation of VMware Cloud Director Appliance 10.5, the bypass is not present. VMware Cloud Director Appliance is impacted since it uses an affected version of sssd from the underlying Photon OS. The sssd issue is no longer present in versions of Photon OS that ship with sssd-2.8.1-11 or higher (Photon OS 3) or sssd-2.8.2-9 or higher (Photon OS 4 and 5).

Rincian

Terbit di NVD

14 November 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/vmware/photon/wiki/Security-Update-3.0-687 advisory vendor
• https://github.com/vmware/photon/wiki/Security-Update-4.0-512 advisory vendor
• https://github.com/vmware/photon/wiki/Security-Update-5.0-143 advisory vendor
• https://www.vmware.com/security/advisories/VMSA-2023-0026.html advisory vendor