Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-34051. PoCs published by horizon3ai.
AI-analyzed exploit summary This PoC exploits CVE-2023-34051, an authentication bypass in VMware vRealize Log Insight, by chaining multiple vulnerabilities (CVE-2022-31706, CVE-2022-31704, CVE-2022-31711) to achieve arbitrary file write and execute a reverse shell via cron job.
Description
VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
Exploits (1)
This PoC exploits CVE-2023-34051, an authentication bypass in VMware vRealize Log Insight, by chaining multiple vulnerabilities (CVE-2022-31706, CVE-2022-31704, CVE-2022-31711) to achieve arbitrary file write and execute a reverse shell via cron job.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H