CVE-2023-20887: VMware Aria Operations for Networks Command Injection

VMware issues advisory to address three flaws in its VMware Aria Operations for Networks solution, including a critical command injection flaw assigned a CVSSv3 score of 9.8.

Background

On June 7, VMware published an advisory (VMSA-2023-0012.1) to address three vulnerabilities in VMware Aria Operations for Networks, formerly known as vRealize Network Insight (vRNI), a solution for building secure network infrastructure in hybrid and multi-cloud environments. Two of the vulnerabilities disclosed in …

address advisory aria aria operations for networks command command injection critical cve cve-2023-20887 flaw flaws injection june networks operations score solution vmware vulnerabilities