{"id":888,"date":"2024-01-17T13:36:54","date_gmt":"2024-01-17T13:36:54","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/vmware-kriticna-ranjivost-s-ocjenom-9-9\/"},"modified":"2026-11-04T08:54:48","modified_gmt":"2026-11-04T08:54:48","slug":"vmware-kriticna-ranjivost-s-ocjenom-9-9","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/vmware-kriticna-ranjivost-s-ocjenom-9-9\/","title":{"rendered":"VMware kriti\u010dna ranjivost s ocjenom 9.9"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>VMware, kompanija koja se bavi tehnologijom virtualizacije i oblaka, izdala je upozorenje o postojanju ranjivosti u njihovim proizvodima s najvi\u0161om mogu\u0107om CVSS ocjenom kriti\u010dnosti - 9.9.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ranjivost je dobila oznaku <a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2023-34063\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2023-34063<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Pogo\u0111eni proizvodi:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>VMware Aria Automation (ranije poznat kao vRealize Automation)<\/li><li>VMware Cloud Foundation (Aria Automation)<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>U Aria Automation-u postoji ranjivost nedostatka kontrole pristupa (Missing Access Control vulnerability)<\/strong> pomo\u0107u koje autentificirani napada\u010d mo\u017ee ostvariti neovla\u0161teni pristup udaljenim organizacijama i procesima.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Za otklanjanje ove ranjivosti odmah preuzmite dostupne zakrpe koje su naveden u tablici:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Product<\/td><td>Version<\/td><td>Running On<\/td><td>CVE Identifier<\/td><td>CVSSv3<\/td><td>Severity<\/td><td>Fixed Version<\/td><td>Workarounds<\/td><td>Additional Documentation<\/td><\/tr><tr><td>VMware Aria Automation<\/td><td>8.16<\/td><td>Any<\/td><td>CVE-2023-34063<\/td><td>N\/A<\/td><td>N\/A<\/td><td>Unaffected<\/td><td>N\/A<\/td><td><a href=\"https:\/\/via.vmw.com\/vmsa-2024-0001-qna\">FAQ<\/a><\/td><\/tr><tr><td>VMware Aria Automation<\/td><td>8.14.x<\/td><td>Any<\/td><td>CVE-2023-34063<\/td><td><a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:H\/A:H\">9.9<\/a><\/td><td>critical<\/td><td><a href=\"https:\/\/kb.vmware.com\/s\/article\/96098\">8.14.1 + Patch<\/a><\/td><td>N\/A<\/td><td><a href=\"https:\/\/via.vmw.com\/vmsa-2024-0001-qna\">FAQ<\/a><\/td><\/tr><tr><td>VMware Aria Automation<\/td><td>8.13.x<\/td><td>Any<\/td><td>CVE-2023-34063<\/td><td><a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:H\/A:H\">9.9<\/a><\/td><td>critical<\/td><td><a href=\"https:\/\/kb.vmware.com\/s\/article\/96098\">8.13.1 + Patch<\/a><\/td><td>N\/A<\/td><td><a href=\"https:\/\/via.vmw.com\/vmsa-2024-0001-qna\">FAQ<\/a><\/td><\/tr><tr><td>VMware Aria Automation<\/td><td>8.12.x<\/td><td>Any<\/td><td>CVE-2023-34063<\/td><td><a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:H\/A:H\">9.9<\/a><\/td><td>critical<\/td><td><a href=\"https:\/\/kb.vmware.com\/s\/article\/96098\">8.12.2 + Patch<\/a><\/td><td>N\/A<\/td><td><a href=\"https:\/\/via.vmw.com\/vmsa-2024-0001-qna\">FAQ<\/a><\/td><\/tr><tr><td>VMware Aria Automation<\/td><td>8.11.x<\/td><td>Any<\/td><td>CVE-2023-34063<\/td><td><a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:H\/A:H\">9.9<\/a><\/td><td>critical<\/td><td><a href=\"https:\/\/kb.vmware.com\/s\/article\/96098\">8.11.2 + Patch<\/a><\/td><td>N\/A<\/td><td><a href=\"https:\/\/via.vmw.com\/vmsa-2024-0001-qna\">FAQ<\/a><\/td><\/tr><tr><td>VMware Cloud Foundation (Aria Automation)<\/td><td>5.x, 4.x<\/td><td>Any<\/td><td>CVE-2023-34063<\/td><td><a href=\"https:\/\/www.first.org\/cvss\/calculator\/3.1#CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:H\/A:H\">9.9<\/a><\/td><td>critical<\/td><td><a href=\"https:\/\/kb.vmware.com\/s\/article\/96136\">KB96136<\/a><\/td><td>N\/A<\/td><td><a href=\"https:\/\/via.vmw.com\/vmsa-2024-0001-qna\">FAQ<\/a><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Za vi\u0161e informacija o ovoj ranjivosti posjetite stranicu <a href=\"https:\/\/www.vmware.com\/security\/advisories\/VMSA-2024-0001.html\">VMwarea<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>VMware, kompanija koja se bavi tehnologijom virtualizacije i oblaka, izdala je upozorenje o postojanju ranjivosti u njihovim proizvodima s najvi\u0161om mogu\u0107om CVSS ocjenom kriti\u010dnosti &#8211; 9.9. Ranjivost je dobila oznaku CVE-2023-34063. Pogo\u0111eni proizvodi: VMware Aria Automation (ranije poznat kao vRealize Automation) VMware Cloud Foundation (Aria Automation) U Aria Automation-u postoji ranjivost nedostatka kontrole pristupa (Missing [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1414,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-888","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/888","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=888"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/888\/revisions"}],"predecessor-version":[{"id":1417,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/888\/revisions\/1417"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1414"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=888"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=888"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=888"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=888"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=888"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}