What is CVE-2023-20890?

CVE-2023-20890 is a high-severity vulnerability in Vmware Aria_operations_for_networks, classified under Path Traversal. CVSS score: 7.2/10. Published 2023-08-29.

How severe is CVE-2023-20890?

High severity. CVSS v3 base score is 7.2 out of 10.

Path Traversal in Vmware Aria_operations_for_networks

CVE-2023-20890

Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to VMware Aria Operations for Networks can write files to arbitrary locations resulting in remote code…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.216 (97.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Vmware Aria_operations_for_networks
N/a Aria Operations For Networks — versions Aria Operations for Networks 6.x

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security@vmware.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-20890?: CVE-2023-20890 is a high-severity vulnerability in Vmware Aria_operations_for_networks, classified under Path Traversal. CVSS score: 7.2/10. Published 2023-08-29.
How severe is CVE-2023-20890?: High severity. CVSS v3 base score is 7.2 out of 10.