June 21, 2023, 5 a.m. | info@thehackernews.com (The Hacker News)

The Hacker News thehackernews.com

VMware has flagged that a recently patched critical command injection vulnerability in Aria Operations for Networks (formerly vRealize Network Insight) has come under active exploitation in the wild.
The flaw, tracked as CVE-2023-20887, could allow a malicious actor with network access to the product to perform a command injection attack, resulting in remote code execution.
It impacts VMware

access actor alert aria aria operations for networks attack command command injection critical critical vulnerability cve cve-2023-20887 exploitation exploiting flaw hackers injection injection attack insight malicious network network access networks operations product under vmware vrealize vulnerability

Information Technology Specialist I, LACERA: Information Security Engineer

@ Los Angeles County Employees Retirement Association (LACERA) | Pasadena, CA

Sales Engineer - Customer Success

@ Arctic Wolf | Eden Prairie

Director, Risk Management Strategy and Operations

@ Amgen | US - California - Thousand Oaks - Field/Remote

Risk Consulting - Protect Tech -Staff-General skill

@ EY | Noida, UP, IN, 201301

Lead Systems Engineer (Tranche 1)

@ The Aerospace Corporation | Chantilly

Lead Systems Engineer (Tranche 3)

@ The Aerospace Corporation | Chantilly