CVE-2023-20890

Aria Operations for Networks contains an arbitrary file write vulnerability

High · published August 29, 2023

CVSS v3.1
7.2
EPSS
20%
Percentile
97.5
In the wild
Unconfirmed
What it is

Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to VMware Aria Operations for Networks can write files to arbitrary locations resulting in remote code execution.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.20163 · 97.5th percentile
Published
2023-08-29T17:38Z
EPSS history
Timeline
  • 29 AUG 17:38Z
    Aria Operations for Networks contains an arbitrary file write vulnerability
    cvelistv5