VMware Alert
2835Warning Date
Severity Level
Warning Number
Target Sector
21 February, 2023
● Critical
2023-5470
All
VMware has released security alerts to address several vulnerabilities in the following product:
- VMware Carbon Black App Control (App Control)
- VMware vRealize Orchestrator
- VMware vRealize Automation
- VMware Cloud Foundation (Cloud Foundation)
An attacker could exploit the vulnerabilities to achieve the following:
- access to the underlying server operating system.
- Access to sensitive information or possible escalation of privileges.
The CERT team encourages users to review VMware security advisory and update the affected products:
https://www.vmware.com/security/advisories/VMSA-2023-0004.html
https://www.vmware.com/security/advisories/VMSA-2023-0005.html