[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJkSfKb_iZpIzzgjM7GRMHgICInY6Ma7ZgKLobkbeE_E":3,"g5a-risk:CVE-2023-34058":206},{"success":4,"data":5,"meta":203},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":28,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":75,"references":76,"referencesCount":120,"weaknesses":121,"weaknessesCount":130,"isActivelyExploited":131,"cisaInfo":28,"otxData":28,"relatedBlogPosts":132,"seoMetadata":133,"configurations":158,"relatedVendorCves":201,"notableEvents":202},"CVE-2023-34058","What is CVE-2023-34058?","VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted  Guest Operation Privileges https:\u002F\u002Fdocs.vmware.com\u002Fen\u002FVMware-vSphere\u002F8.0\u002Fvsphere-security\u002FGUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged  Guest Alias https:\u002F\u002Fvdc-download.vmware.com\u002Fvmwb-repository\u002Fdcr-public\u002Fd1902b0e-d479-46bf-8ac9-cee0e31e8ec0\u002F07ce8dbd-db48-4261-9b8f-c6d3ad8ba472\u002Fvim.vm.guest.AliasManager.html .","VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https:\u002F\u002Fdocs.vmware.com...","2023-10-27T05:15:38.957","2025-03-06T16:15:41.84",7.5,"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"security@vmware.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":27,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","ADJACENT_NETWORK","HIGH","LOW","NONE","UNCHANGED",7.1,null,1.2,5.9,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":35,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":25,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},1.6,0.00672,[36,36,36,36,36,36,36],"High",[40,45,50,53,56,59,64,69,72],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"vmware","open_vm_tools","*","cpe:2.3:a:vmware:open_vm_tools:*:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":51,"criteria":52,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":54,"criteria":55,"vulnerable":4},"12.0","cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",{"vendor":41,"product":57,"version":43,"criteria":58,"vulnerable":4},"tools","cpe:2.3:a:vmware:tools:*:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",{"vendor":65,"product":66,"version":67,"criteria":68,"vulnerable":4},"fedoraproject","fedora","37","cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",{"vendor":65,"product":66,"version":70,"criteria":71,"vulnerable":4},"38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",{"vendor":65,"product":66,"version":73,"criteria":74,"vulnerable":4},"39","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",9,[77,83,88,92,95,98,101,106,108,110,112,114,116,118],{"url":78,"source":79,"tags":80},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F10\u002F27\u002F1","Openwall",[81,82],"Mailing List","Patch",{"url":84,"source":85,"tags":86},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F11\u002Fmsg00002.html","Debian",[81,87],"Third Party Advisory",{"url":89,"source":90,"tags":91},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FG7G77Z76CQPGUF7VHRA6O3UFCMPPR4O2\u002F","Fedoraproject",[81,87],{"url":93,"source":90,"tags":94},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FMQUOFQL2SNNNMKROQ3TZQY4HEYMNOIBW\u002F",[81,87],{"url":96,"source":90,"tags":97},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FWLTKVTRKQW2GD2274H3UOW6XU4E62GSK\u002F",[81,87],{"url":99,"source":85,"tags":100},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2023\u002Fdsa-5543",[87],{"url":102,"source":103,"tags":104},"https:\u002F\u002Fwww.vmware.com\u002Fsecurity\u002Fadvisories\u002FVMSA-2023-0024.html","Vmware",[105],"Vendor Advisory",{"url":78,"source":79,"tags":107},[81,82],{"url":84,"source":85,"tags":109},[81,87],{"url":89,"source":90,"tags":111},[81,87],{"url":93,"source":90,"tags":113},[81,87],{"url":96,"source":90,"tags":115},[81,87],{"url":99,"source":85,"tags":117},[87],{"url":102,"source":103,"tags":119},[105],14,[122],{"id":123,"name":124,"description":125,"extendedDescription":126,"status":127,"abstraction":128,"structure":129},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","","Draft","Base","Simple",1,false,[],{"title":134,"metaDescription":135,"keywords":136,"canonicalUrl":137,"structuredData":138},"What is CVE-2023-34058? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-34058, a high severity cyber security vulnerability from 2023. VMware Tools contains a SAML token signature bypass vulnera...","CVE-2023-34058, CVE-2023-34058 vulnerability, CVE-2023-34058 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, vmware security, debian security, microsoft security, fedoraproject security, open_vm_tools vulnerability, debian_linux vulnerability, tools vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2023-34058",{"@context":139,"@type":140,"headline":134,"description":135,"datePublished":10,"dateModified":11,"author":141,"publisher":145,"about":149,"mainEntityOfPage":153,"articleSection":156,"keywords":157},"https:\u002F\u002Fschema.org","TechArticle",{"@type":142,"name":143,"url":144},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":142,"name":143,"url":144,"logo":146},{"@type":147,"url":148},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":150,"name":6,"description":151,"additionalType":152},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":154,"@id":155},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-34058","Cybersecurity","CVE-2023-34058, CVE-2023-34058 vulnerability, CVE-2023-34058 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[159,168,178,191],{"Operator":28,"Negate":28,"Nodes":160},[161],{"Operator":162,"Negate":28,"CPEMatch":163},"OR",[164],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":165,"VersionStartExcluding":28,"VersionStartIncluding":166,"VersionEndExcluding":28,"VersionEndIncluding":167},"9713E664-EA87-4236-B75E-8C44D5791E70","11.0.0","12.3.0",{"Operator":28,"Negate":28,"Nodes":169},[170],{"Operator":162,"Negate":28,"CPEMatch":171},[172,174,176],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":173,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":175,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"FA6FEEC2-9F11-4643-8827-749718254FED",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":177,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"46D69DCC-AE4D-4EA5-861C-D60951444C6C",{"Operator":179,"Negate":28,"Nodes":180},"AND",[181,187],{"Operator":162,"Negate":28,"CPEMatch":182},[183],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":184,"VersionStartExcluding":28,"VersionStartIncluding":185,"VersionEndExcluding":186,"VersionEndIncluding":28},"D481D9E3-54C4-4D0E-9B3D-F863650CECD6","10.3.0","12.3.5",{"Operator":162,"Negate":28,"CPEMatch":188},[189],{"Vulnerable":28,"Criteria":63,"MatchCriteriaID":190,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A2572D17-1DE6-457B-99CC-64AFD54487EA",{"Operator":28,"Negate":28,"Nodes":192},[193],{"Operator":162,"Negate":28,"CPEMatch":194},[195,197,199],{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":196,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E30D0E6F-4AE8-4284-8716-991DFA48CC5D",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":198,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":200,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646",[],[],{"lastModified":11,"cacheTime":204,"version":205},1792249089851,"2.0",{"score":207,"band":208,"action":209,"scoredAt":210},46,"Medium","Plan remediation","2026-10-16T06:59:37.585839+00:00"]