CVE-2023-34039 PoC — VMware Aria Operations 加密问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-34039.yaml

Associated Vulnerability

Title:VMware Aria Operations 加密问题漏洞 (CVE-2023-34039)
Description:VMware Aria Operations是美国威睿（VMware）公司的一个统一的、人工智能驱动的自动驾驶 IT 运营管理平台，适用于私有云、混合云和多云环境。 Aria Operations for Networks存在安全漏洞，该漏洞源于缺乏唯一的加密密钥生成，导致身份验证绕过，攻击者利用该可以绕过 SSH 身份验证来访问 Aria Operations for Networks CLI。

Description

VMWare Aria Operations for Networks (vRealize Network Insight) Static SSH key RCE (CVE-2023-34039)
Version: All versions from 6.0 to 6.10

File Snapshot


 id: CVE-2023-34039

info:
  name: VMWare Aria Operations - Remote Code Execution
  author: tarunKoya

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!