VYPR
← All advisories
High severity8.8NVD Advisory· Published May 12, 2023· Updated Jun 17, 2026

CVE-2023-20877

CVE-2023-20877

Description

VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly privileges can perform code execution leading to privilege escalation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14
  • VMware/Aria Operationsllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)
  • VMware/Cloud Foundation
    cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
    Range: >=4.0,<=4.5
  • VMware/Vrealize Operations11 versions
    cpe:2.3:a:vmware:vrealize_operations:8.6.0:-:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:vmware:vrealize_operations:8.6.0:-:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix1:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix2:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix4:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix5:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix6:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix8:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_operations:8.6.0:hotfix9:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_operations:8.10.0:-:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_operations:8.10.0:hotfix1:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vrealize_operations:8.10.0:hotfix2:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.