CVE-2023-20867 · netVigilance record NV23-0085
VMware Tools Authentication Bypass
past due
What to do
Apply updates per vendor instructions.
CISA deadline 2023-07-14 · passed 3 years 1 month ago · applies to US federal civilian agencies; used elsewhere as a reference SLA
What happened
VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.
Who is affected
VMware Tools. Affected version ranges are listed in the vendor advisory and the NVD entry linked under Sources.
Weakness class: CWE-287.
Timeline
- Added to CISA KEVExploitation in the wild confirmed by CISA
- CISA remediation deadlinepassed 3 years 1 month ago
Sources
- NVD entry for CVE-2023-20867 nvd.nist.gov/vuln/detail/CVE-2023-20867
- CISA Known Exploited Vulnerabilities catalog www.cisa.gov/known-exploited-vulnerabilities-catalog
- vmware.com www.vmware.com/security/advisories/VMSA-2023-0013.html
- nvd.nist.gov nvd.nist.gov/vuln/detail/CVE-2023-20867