Critical CVE-2023-34060 Vulnerability in VMware Cloud Director Appliance: CISA Advises Immediate Patching

VMware recently issued an advisory (VMSA-2023-0026) regarding a critical authentication bypass vulnerability in its VMware Cloud Director Appliance (VCD Appliance). Identified as CVE-2023-34060, this vulnerability poses a significant risk with a CVSSv3 score of 9.8, indicating its critical severity. The issue was first disclosed on November 14, 2023 to VMware by Dustin Hartle from Ideal Integrations Inc.

CISA’s alert for the vulnerability, VMware Cloud Director Appliance – CVE-2023-34060

CISA, the Cybersecurity and Infrastructure Security Agency, has issued a security …

advisory authentication authentication bypass bypass bypass vulnerability cisa cloud cloud director critical cve cve-2023-34060 director issue november patching risk score severity vmware vmware cloud vulnerability