CVE-2023-20889 PoC — VMware Aria Operations 命令注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20889.yaml

Associated Vulnerability

Title:VMware Aria Operations 命令注入漏洞 (CVE-2023-20889)
Description:VMware Aria Operations是美国威睿（VMware）公司的一个统一的、人工智能驱动的自动驾驶 IT 运营管理平台，适用于私有云、混合云和多云环境。 VMware Aria Operations Networks 6.x系列版本存在安全漏洞，攻击者利用该漏洞可以执行导致信息泄露的命令注入攻击。

Description

Aria Operations for Networks contains an information disclosure vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in information disclosure.

File Snapshot


 id: CVE-2023-20889

info:
  name: VMware Aria Operations for Networks - Code Injection Information D

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!