CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-06-13
VMware Tools Host-to-Guest Authentication Bypass Vulnerability (CVE-2023-20867) Technical Analysis and Hardening Guide
[Affected Scope] Guest virtual machines running on VMware ESXi hosts with vulnerable versions of VMware Tools or open-vm-tools installed
[Impact] A fully compromised ESXi host can bypass host-to-guest authentication, compromising the confidentiality and integrity of the guest operating system
[Mitigation] Immediately upgrade VMware Tools and open-vm-tools to the latest patched versions provided by VMware and OS vendors