ID:9393 - Exploit for Improper Authentication in Aria Operations for Logs (formerly vRealize Log Insight) - CVE-2023-34051

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error in the authentication process. A remote non-authenticated attacker can bypass authentication process and inject files into the operating system of an impacted appliance.

Successful exploitation of the vulnerability can result in remote code execution and full compromise of the affected appliance.

Remediation