Arbitrary File Write Vulnerability in VMware Aria Operations for Networks

CVE-2023-20890 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to VMware Aria Operations for Networks can write files to arbitrary locations resulting in remote code execution.

Learn more about our Cis Benchmark Audit For Vmware.