Unauthorized Access to Remote Organizations and Workflows

CVE-2023-34063

Summary

VMware Aria Automation is impacted by a missing access control vulnerability that could allow an authenticated malicious actor to gain unauthorized access to enterprise-level workflows and remote organizations. This vulnerability can potentially lead to significant data breaches and compromise sensitive information, emphasizing the need for immediate remediation and robust access controls.

News Articles

Help Net Security

CVE-2023-34063CVE-2023-35082

Week in review: 10 cybersecurity frameworks you need to know, exploited Chrome zero-day fixed - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Key elements for a successful cyber risk management

1 year ago

Help Net Security

CVE-2023-35082CVE-2023-34063

Ivanti EPMM and MobileIron Core vulnerability is actively exploited, CISA confirms (CVE-2023-35082) - Help Net Security

A critical vulnerability (CVE-2023-35082) affecting Ivanti EPMM and MobileIron Core mobile management software is being actively exploited.

1 year ago

Help Net Security

CVE-2023-34063

VMware: Plug critical Aria Automation hole immediately! (CVE-2023-34063) - Help Net Security

A vulnerability (CVE-2023-34063) in VMware Aria Automation can be exploited to gain access to remote organizations and workflows.

1 year ago

References