All vulnerabilities
CVE-2023-20867

VMware Tools Authentication Bypass Vulnerability

VMware ToolsContainers & cloud
Open in ThreatlineRecord JSON
CVSS
3.9Low
ExploitationExploited in the wildAdded to KEV 23 Jun 2023CISA KEV
Exploit odds (EPSS)13.6%Chance of exploitation activity in the next 30 days, higher than 96% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Federal deadline14 Jul 2023Remediation due date for US federal agenciesCISA KEV
CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 13 Jun 2023, 16:47 UTCPublishedCVE List
  2. 23 Jun 2023Added to CISA KEVCISA KEV

Description

VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.

Text from CVE List

Affected versions 1

  • VMware Toolsunaffected: 12.2.5CVE List

References 9