CVEFinder.io

CVE-2023-34058

⚠️ high
🔍 Scan for this CVE
Summary

VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-d

Description

VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html  in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html .

CVSS Score
7.1
High
EPSS Score
0.0
Exploit Probability
Published Date
2023-10-27
First Seen: 2026-01-05
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 53.9% of all 318,332 vulnerabilities in our database.

#146,604
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Mar 6, 2025
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2025-03-06
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-347

📦 Affected Products 8

Vendor Product Status Affected Versions
debian debian_linux Affected
v10.0
debian debian_linux Affected
v11.0
debian debian_linux Affected
v12.0
fedoraproject fedora Affected
v37
fedoraproject fedora Affected
v38
fedoraproject fedora Affected
v39
vmware tools Affected
≥ 10.3.0 < 12.3.5
vmware open_vm_tools Affected
≥ 11.0.0 ≤ 12.3.0

🔗 References 7

http://www.openwall.com/lists/oss-security/2023/10/27/1
Mailing List Patch
https://lists.debian.org/debian-lts-announce/2023/11...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/packag...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/packag...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/packag...
Mailing List Third Party Advisory
https://www.debian.org/security/2023/dsa-5543
Third Party Advisory
https://www.vmware.com/security/advisories/VMSA-2023...
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-25506 ⚠️ high 7.7 0.0 MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can ... 2026-02-10
CVE-2025-62599 ⚠️ high 7.5 0.0 Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). ... 2026-02-03
CVE-2025-62600 ⚠️ high 7.5 0.0 Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). ... 2026-02-03
CVE-2025-62602 ⚠️ high 7.5 0.0 Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). ... 2026-02-03
CVE-2025-62603 ⚠️ high 7.5 0.0 Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). ... 2026-02-03
CVE-2025-62799 ⛔ critical 9.8 0.0 Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group ). ... 2026-02-03
These CVEs affect the same products