[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fusVhZICF1TTdwSfwKhpf-JlLgkfala7rR-QleOxUH1g":3,"g5a-risk:CVE-2023-20900":225},{"success":4,"data":5,"meta":222},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":25,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":83,"references":84,"referencesCount":121,"weaknesses":122,"weaknessesCount":131,"isActivelyExploited":132,"cisaInfo":25,"otxData":25,"relatedBlogPosts":133,"seoMetadata":134,"configurations":159,"relatedVendorCves":220,"notableEvents":221},"CVE-2023-20900","What is CVE-2023-20900?","A malicious actor that has been granted  Guest Operation Privileges https:\u002F\u002Fdocs.vmware.com\u002Fen\u002FVMware-vSphere\u002F8.0\u002Fvsphere-security\u002FGUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https:\u002F\u002Fvdc-download.vmware.com\u002Fvmwb-repository\u002Fdcr-public\u002Fd1902b0e-d479-46bf-8ac9-cee0e31e8ec0\u002F07ce8dbd-db48-4261-9b8f-c6d3ad8ba472\u002Fvim.vm.guest.AliasManager.html .","A malicious actor that has been granted Guest Operation Privileges https:\u002F\u002Fdocs.vmware.com\u002Fen\u002FVMware-vSphere\u002F8.0\u002Fvsphere-security\u002FGUID-6A952214-0E5E-4CCF-9D2...","2023-08-31T10:15:08.247","2024-01-12T20:41:42.68",7.5,"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":25,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","ADJACENT_NETWORK","HIGH","NONE","UNCHANGED",null,1.6,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":35,"ImpactScore":27},"security@vmware.com","Secondary",{"Version":20,"VectorString":32,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":33,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":34,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","LOW",7.1,1.2,0.01463,[36,36,36,36,36,36,36],"High",[40,45,50,54,57,62,65,68,73,76,79],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"vmware","tools","*","cpe:2.3:a:vmware:tools:*:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":48,"criteria":53,"vulnerable":4},"linux","linux_kernel","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",{"vendor":41,"product":55,"version":43,"criteria":56,"vulnerable":4},"open_vm_tools","cpe:2.3:a:vmware:open_vm_tools:*:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"fedoraproject","fedora","37","cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":63,"criteria":64,"vulnerable":4},"38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":66,"criteria":67,"vulnerable":4},"39","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",{"vendor":69,"product":70,"version":71,"criteria":72,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":69,"product":70,"version":74,"criteria":75,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",{"vendor":69,"product":70,"version":77,"criteria":78,"vulnerable":4},"12.0","cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",{"vendor":80,"product":81,"version":48,"criteria":82,"vulnerable":4},"netapp","ontap_select_deploy_administration_utility","cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",11,[85,91,95,99,103,106,109,113,116],{"url":86,"source":87,"tags":88},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F08\u002F31\u002F1","Openwall",[89,90],"Mailing List","Third Party Advisory",{"url":92,"source":87,"tags":93},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F10\u002F27\u002F1",[89,94],"Patch",{"url":96,"source":97,"tags":98},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F10\u002Fmsg00000.html","Debian",[89],{"url":100,"source":101,"tags":102},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FNVKQ6Y2JFJRWPFOZUOTFO3H27BK5GGOG\u002F","Fedoraproject",[89],{"url":104,"source":101,"tags":105},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FTJNJMD67QIT6LXLKWSHFM47DCLRSMT6W\u002F",[89],{"url":107,"source":101,"tags":108},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZJM6HDRQYS74JA7YNKQBFH2XSZ52HEWH\u002F",[89],{"url":110,"source":111,"tags":112},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20231013-0002\u002F","Netapp",[90],{"url":114,"source":97,"tags":115},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2023\u002Fdsa-5493",[90],{"url":117,"source":118,"tags":119},"https:\u002F\u002Fwww.vmware.com\u002Fsecurity\u002Fadvisories\u002FVMSA-2023-0019.html","Vmware",[94,120],"Vendor Advisory",9,[123],{"id":124,"name":125,"description":126,"extendedDescription":127,"status":128,"abstraction":129,"structure":130},"CWE-294","Authentication Bypass by Capture-replay","A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).","Capture-replay attacks are common and can be difficult to defeat without cryptography. They are a subset of network injection attacks that rely on observing previously-sent valid commands, then changing them slightly if necessary and resending the same commands to the server.","Incomplete","Base","Simple",1,false,[],{"title":135,"metaDescription":136,"keywords":137,"canonicalUrl":138,"structuredData":139},"What is CVE-2023-20900? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-20900, a high severity cyber security vulnerability from 2023. A malicious actor that has been granted Guest Operation Pri...","CVE-2023-20900, CVE-2023-20900 vulnerability, CVE-2023-20900 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, vmware security, microsoft security, linux security, fedoraproject security, debian security, tools vulnerability, windows vulnerability, linux_kernel vulnerability","\u002Fwhat-is\u002Fcve-2023-20900",{"@context":140,"@type":141,"headline":135,"description":136,"datePublished":10,"dateModified":11,"author":142,"publisher":146,"about":150,"mainEntityOfPage":154,"articleSection":157,"keywords":158},"https:\u002F\u002Fschema.org","TechArticle",{"@type":143,"name":144,"url":145},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":143,"name":144,"url":145,"logo":147},{"@type":148,"url":149},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":151,"name":6,"description":152,"additionalType":153},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":155,"@id":156},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-20900","Cybersecurity","CVE-2023-20900, CVE-2023-20900 vulnerability, CVE-2023-20900 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[160,174,185,194,204,214],{"Operator":161,"Negate":25,"Nodes":162},"AND",[163,170],{"Operator":164,"Negate":25,"CPEMatch":165},"OR",[166],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":167,"VersionStartExcluding":25,"VersionStartIncluding":168,"VersionEndExcluding":169,"VersionEndIncluding":25},"760FD9D8-9866-4EAE-AA33-8D043AA8C043","10.3.0","12.3.0",{"Operator":164,"Negate":25,"CPEMatch":171},[172],{"Vulnerable":25,"Criteria":49,"MatchCriteriaID":173,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"A2572D17-1DE6-457B-99CC-64AFD54487EA",{"Operator":161,"Negate":25,"Nodes":175},[176,181],{"Operator":164,"Negate":25,"CPEMatch":177},[178],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":179,"VersionStartExcluding":25,"VersionStartIncluding":168,"VersionEndExcluding":180,"VersionEndIncluding":25},"D42F54B9-EF73-47F8-8914-383B974AA501","10.3.26",{"Operator":164,"Negate":25,"CPEMatch":182},[183],{"Vulnerable":25,"Criteria":53,"MatchCriteriaID":184,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",{"Operator":161,"Negate":25,"Nodes":186},[187,191],{"Operator":164,"Negate":25,"CPEMatch":188},[189],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":190,"VersionStartExcluding":25,"VersionStartIncluding":168,"VersionEndExcluding":169,"VersionEndIncluding":25},"E93872A3-3D1E-4A62-B5E2-170E46571997",{"Operator":164,"Negate":25,"CPEMatch":192},[193],{"Vulnerable":25,"Criteria":53,"MatchCriteriaID":184,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},{"Operator":25,"Negate":25,"Nodes":195},[196],{"Operator":164,"Negate":25,"CPEMatch":197},[198,200,202],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":199,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"E30D0E6F-4AE8-4284-8716-991DFA48CC5D",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":201,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":203,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646",{"Operator":25,"Negate":25,"Nodes":205},[206],{"Operator":164,"Negate":25,"CPEMatch":207},[208,210,212],{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":209,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":211,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"FA6FEEC2-9F11-4643-8827-749718254FED",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":213,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"46D69DCC-AE4D-4EA5-861C-D60951444C6C",{"Operator":25,"Negate":25,"Nodes":215},[216],{"Operator":164,"Negate":25,"CPEMatch":217},[218],{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":219,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"E7CF3019-975D-40BB-A8A4-894E62BD3797",[],[],{"lastModified":11,"cacheTime":223,"version":224},1792249089669,"2.0",{"score":226,"band":227,"action":228,"scoredAt":229},46,"Medium","Plan remediation","2026-10-16T06:58:59.14249+00:00"]