vendor:
VMware Cloud Director
by:
Abdualhadi khalifa
8.1
CVSS
CRITICAL
Bypass identity verification
287
CWE
Product Name: VMware Cloud Director
Affected Version From: 45422
Affected Version To: 10.5
Patch Exists: NO
Related CWE: CVE-2023-34060
CPE: a:vmware:cloud_director:10.5
Platforms Tested:
2023
VMware Cloud Director | Bypass identity verification
The exploit allows an attacker to bypass identity verification in VMware Cloud Director version 10.5. By exploiting the vulnerability (CVE-2023-34060), the attacker can execute commands on the target device using hardcoded credentials.
Mitigation:
To mitigate this vulnerability, it is recommended to update VMware Cloud Director to a patched version, change default credentials, and restrict network access to the application.
