7.2
High
CVE-2023-20865 VMware Aria Operations for Logs contains a command injection vulnerability
Description
VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs can execute arbitrary commands as root.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Aria Operations for Logs (formerly vRealize Log Insight) | Versions not published |