high7.2
CVE-2023-20878
VMware Aria Operations contains a deserialization vulnerability.
Impact
VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Cloud Foundation | from 4.0 through 4.5 |
| Vmware | Vrealize Operations | Versions 8.6.0, 8.10.0 |