CVE-2023-20867

CVSS 3.1 Score 3.9 of 10 (low)

Details

Published Jun 13, 2023
Updated: Jun 27, 2024
CWE ID 287

Summary

CVE-2023-20867 is a recently disclosed vulnerability affecting VMware ESXi hosts. Successful exploitation of this weakness enables an adversary to force VMware Tools to fail authentication during host-to-guest operations. This can significantly impact the confidentiality and integrity of guest virtual machines by preventing secure data exchange and potentially introducing unauthorized access. Overall, this vulnerability could lead to severe consequences in enterprise environments where virtual machines handle sensitive data.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • VMware Tools
  • Debian
  • Fedora Operating System

Affected Vendors

  • Debian
  • Fedora Project
  • VMware Inc.