Browse / CVEs / CVE-2023-20867
CVE-2023-20867· vmware / tools· CWE-287
VMware Tools Authentication Bypass Vulnerability
Exploited in the wild. Listed by CISA on 2023-06-23; known to be used by ransomware.
13.6%likelihood of exploitation, next 30 days
97%of all CVEs are less likely
Nonecheck to confirm it
VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from