vendor:
VMware Cloud Director
by:
Abdualhadi khalifa
8.1
CVSS
CRITICAL
Bypass identity verification
287
CWE
Product Name: VMware Cloud Director
Affected Version From: 10.5
Affected Version To: 10.5
Patch Exists: NO
Related CWE: CVE-2023-34060
CPE: a:vmware:cloud_director:10.5
Platforms Tested:
2023
VMware Cloud Director | Bypass identity verification
The exploit allows an attacker to bypass identity verification in VMware Cloud Director version 10.5. By exploiting this vulnerability (CVE-2023-34060), an attacker can execute unauthorized commands on the target device.
Mitigation:
To mitigate this vulnerability, it is recommended to update VMware Cloud Director to a patched version. Additionally, restrict access to the vulnerable system and ensure strong, unique passwords are used.
