Skip to main content

VMware Releases Security Update for VMware vRealize Operations

Security update addresses a vulnerability in VMware vRealize Operations

Threat ID:
CC-4254
Threat Severity:
Information only
Published:
2 February 2023 1:56 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Security update addresses a vulnerability in VMware vRealize Operations

Affected platforms

The following platforms are known to be affected:

Versions: 8.6.x

VMware vRealize Operations Manager

Threat details

Introduction

VMware has released a security update to address one security vulnerability in VMware vRealize Operations. The vulnerabilty CVE-2023-20856 has a CVSSv3 base score of 6.5 and contains a cross-site request forgery (CSRF) bypass. An attacker could exploit this vulnerability to take control of an affected system.

Remediation advice

Affected organisations are encouraged to review the following VMware Security Advisory and apply the relevant update.

Last edited: 2 February 2023 1:56 pm