CVE-2023-20891

Summary

CVE-2023-20891 is a vulnerability affecting VMware Tanzu Application Service for VMs and Isolation Segment. This issue involves the logging of CF API admin credentials in hex encoding in platform system audit logs, leading to information disclosure. A malicious non-admin user with access to these logs can decipher the hex-encoded credentials and push new malicious applications. In a standard configuration, non-admin users do not have access to the platform system audit logs.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.