CVE-2023-20867
CVSS 3.1 Score 3.9 of 10 (low)
Details
Published Jun 13, 2023
Updated: Jun 27, 2024
CWE ID 287
Summary
CVE-2023-20867 is a recently disclosed vulnerability affecting VMware ESXi hosts. Successful exploitation of this weakness enables an adversary to force VMware Tools to fail authentication during host-to-guest operations. This can significantly impact the confidentiality and integrity of guest virtual machines by preventing secure data exchange and potentially introducing unauthorized access. Overall, this vulnerability could lead to severe consequences in enterprise environments where virtual machines handle sensitive data.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- VMware Tools
- Debian
- Fedora Operating System
Affected Vendors
- Debian
- Fedora Project
- VMware Inc.