CVE-2023-34058
Description
VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .
How to fix
- vmware tools12.3.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vmware tools | 10.3.0 ≤ v < 12.3.5 | 12.3.5 |
| vmware open_vm_tools | 11.0.0 ≤ v ≤ 12.3.0 | — |
| debian debian_linux | 10.0, 11.0, 12.0 | — |
| fedoraproject fedora | 37, 38, 39 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.