high7.2
CVE-2023-20865
VMware Aria Operations for Logs contains a command injection vulnerability.
Impact
VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrary commands as root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Aria Operations For Logs | from 8.6.0 before 8.12.0 |
| Vmware | Cloud Foundation | from 4.0 through 4.5 |