CVE-2023-20867 - VMware Tools Authentication Bypass Vulnerability

Vulnerability Name

VMware Tools Authentication Bypass Vulnerability

Description

VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://www.vmware.com/security/advisories/VMSA-2023-0013.html

https://nvd.nist.gov/vuln/detail/CVE-2023-20867

Related News Articles

UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in Long-Term SpyingJune 19, 2024