1. Home
  2. CVE Database
  3. CVE-2023-34052
HIGH · 7.8

CVE-2023-34052

VMware Aria Operations for Logs contains a deserialization vulnerability. A malicious actor with non-administrative access to the local system can trigger the deserialization of data which could resul...

Vulnerability Description

VMware Aria Operations for Logs contains a deserialization vulnerability. A malicious actor with non-administrative access to the local system can trigger the deserialization of data which could result in authentication bypass.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
VmwareAria Operations For Logs4.0

Related Weaknesses (CWE)

CWE-502

References

FAQ

What is CVE-2023-34052?

CVE-2023-34052 is a vulnerability with a CVSS score of 7.8 (HIGH). VMware Aria Operations for Logs contains a deserialization vulnerability. A malicious actor with non-administrative access to the local system can trigger the deserialization of data which could resul...

How severe is CVE-2023-34052?

CVE-2023-34052 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-34052?

Check the references section above for vendor advisories and patch information. Affected products include: Vmware Aria Operations For Logs.