Attestkeep
Langue : Français
S'inscrire

Vulnérabilités / CVE-2023-34060

critique

CVE-2023-34060

VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director…

Publiée Modifiée CWE 306
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.

Sévérité par source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Le label propre à Trivy est CRITICAL. Critique selon NVD, Photon OS.

Description

VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 10.5 from an older version. On an upgraded version of VMware Cloud Director Appliance 10.5, a malicious actor with network access to the appliance can bypass login restrictions when authenticating on port 22 (ssh) or port 5480 (appliance management console) . This bypass is not present on port 443 (VCD provider and tenant login). On a new installation of VMware Cloud Director Appliance 10.5, the bypass is not present. VMware Cloud Director Appliance is impacted since it uses an affected version of sssd from the underlying Photon OS. The sssd issue is no longer present in versions of Photon OS that ship with sssd-2.8.1-11 or higher (Photon OS 3) or sssd-2.8.2-9 or higher (Photon OS 4 and 5).

Paquets affectés et versions corrigées

SourcePaquetCorrigé en
Photon OS 3.0sssd2.8.1-11.ph3
Photon OS 4.0libipa_hbac, libipa_hbac-devel, libsss_autofs et 31 autres2.8.2-9.ph4
Photon OS 5.0libipa_hbac, libipa_hbac-devel, libsss_autofs et 31 autres2.8.2-9.ph5
Afficher les 69 entrées de 3 sources
SourcePaquetCorrigé en
Photon OS 3.0sssd2.8.1-11.ph3
Photon OS 4.0libipa_hbac2.8.2-9.ph4
Photon OS 4.0libipa_hbac-devel2.8.2-9.ph4
Photon OS 4.0libsss_autofs2.8.2-9.ph4
Photon OS 4.0libsss_certmap2.8.2-9.ph4
Photon OS 4.0libsss_certmap-devel2.8.2-9.ph4
Photon OS 4.0libsss_idmap2.8.2-9.ph4
Photon OS 4.0libsss_idmap-devel2.8.2-9.ph4
Photon OS 4.0libsss_nss_idmap2.8.2-9.ph4
Photon OS 4.0libsss_nss_idmap-devel2.8.2-9.ph4
Photon OS 4.0libsss_simpleifp2.8.2-9.ph4
Photon OS 4.0libsss_simpleifp-devel2.8.2-9.ph4
Photon OS 4.0libsss_sudo2.8.2-9.ph4
Photon OS 4.0python3-libipa_hbac2.8.2-9.ph4
Photon OS 4.0python3-libsss_nss_idmap2.8.2-9.ph4
Photon OS 4.0python3-sss2.8.2-9.ph4
Photon OS 4.0python3-sss-murmur2.8.2-9.ph4
Photon OS 4.0python3-sssdconfig2.8.2-9.ph4
Photon OS 4.0sssd2.8.2-9.ph4
Photon OS 4.0sssd-ad2.8.2-9.ph4
Photon OS 4.0sssd-client2.8.2-9.ph4
Photon OS 4.0sssd-common2.8.2-9.ph4
Photon OS 4.0sssd-common-pac2.8.2-9.ph4
Photon OS 4.0sssd-dbus2.8.2-9.ph4
Photon OS 4.0sssd-idp2.8.2-9.ph4
Photon OS 4.0sssd-ipa2.8.2-9.ph4
Photon OS 4.0sssd-kcm2.8.2-9.ph4
Photon OS 4.0sssd-krb52.8.2-9.ph4
Photon OS 4.0sssd-krb5-common2.8.2-9.ph4
Photon OS 4.0sssd-ldap2.8.2-9.ph4
Photon OS 4.0sssd-nfs_idmap2.8.2-9.ph4
Photon OS 4.0sssd-polkit-rules2.8.2-9.ph4
Photon OS 4.0sssd-proxy2.8.2-9.ph4
Photon OS 4.0sssd-tools2.8.2-9.ph4
Photon OS 4.0sssd-winbind_idmap2.8.2-9.ph4
Photon OS 5.0libipa_hbac2.8.2-9.ph5
Photon OS 5.0libipa_hbac-devel2.8.2-9.ph5
Photon OS 5.0libsss_autofs2.8.2-9.ph5
Photon OS 5.0libsss_certmap2.8.2-9.ph5
Photon OS 5.0libsss_certmap-devel2.8.2-9.ph5
Photon OS 5.0libsss_idmap2.8.2-9.ph5
Photon OS 5.0libsss_idmap-devel2.8.2-9.ph5
Photon OS 5.0libsss_nss_idmap2.8.2-9.ph5
Photon OS 5.0libsss_nss_idmap-devel2.8.2-9.ph5
Photon OS 5.0libsss_simpleifp2.8.2-9.ph5
Photon OS 5.0libsss_simpleifp-devel2.8.2-9.ph5
Photon OS 5.0libsss_sudo2.8.2-9.ph5
Photon OS 5.0python3-libipa_hbac2.8.2-9.ph5
Photon OS 5.0python3-libsss_nss_idmap2.8.2-9.ph5
Photon OS 5.0python3-sss2.8.2-9.ph5
Photon OS 5.0python3-sss-murmur2.8.2-9.ph5
Photon OS 5.0python3-sssdconfig2.8.2-9.ph5
Photon OS 5.0sssd2.8.2-9.ph5
Photon OS 5.0sssd-ad2.8.2-9.ph5
Photon OS 5.0sssd-client2.8.2-9.ph5
Photon OS 5.0sssd-common2.8.2-9.ph5
Photon OS 5.0sssd-common-pac2.8.2-9.ph5
Photon OS 5.0sssd-dbus2.8.2-9.ph5
Photon OS 5.0sssd-idp2.8.2-9.ph5
Photon OS 5.0sssd-ipa2.8.2-9.ph5
Photon OS 5.0sssd-kcm2.8.2-9.ph5
Photon OS 5.0sssd-krb52.8.2-9.ph5
Photon OS 5.0sssd-krb5-common2.8.2-9.ph5
Photon OS 5.0sssd-ldap2.8.2-9.ph5
Photon OS 5.0sssd-nfs_idmap2.8.2-9.ph5
Photon OS 5.0sssd-polkit-rules2.8.2-9.ph5
Photon OS 5.0sssd-proxy2.8.2-9.ph5
Photon OS 5.0sssd-tools2.8.2-9.ph5
Photon OS 5.0sssd-winbind_idmap2.8.2-9.ph5

Références

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.