critical9.9
CVE-2023-34063
Aria Automation contains a Missing Access Control vulnerability.
Impact
Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vulnerability leading to unauthorized access to remote organizations and workflows.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Aria Automation | Versions 8.11.0, 8.11.1, 8.11.2, 8.12.0, 8.12.1, 8.12.2 |
| Vmware | Cloud Foundation | Versions 4.0, 5.0 |