CVE-2023-34039

Description

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.

Weakness classification

• nvd@nist.gov: CWE-327

Primary references

• security@vmware.com — Third Party Advisory, VDB Entry
• security@vmware.com — Exploit, Third Party Advisory, VDB Entry
• security@vmware.com — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory