high7.8
CVE-2023-34052
VMware Aria Operations for Logs contains a deserialization vulnerability.
Impact
VMware Aria Operations for Logs contains a deserialization vulnerability. A malicious actor with non-administrative access to the local system can trigger the deserialization of data which could result in authentication bypass.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Aria Operations For Logs | Versions 4.0, 5.0, 8.10.2, 8.12 |