CVE:CVE-2023-20877
CNNVD:CNNVD-202305-1304
VMware Aria Operations是美国威睿（VMware）公司的一个统一的、人工智能驱动的自动驾驶 IT 运营管理平台，适用于私有云、混合云和多云环境。
VMware Aria Operations存在安全漏洞，该漏洞源于具有 ReadOnly 权限的经过身份验证的恶意用户可以执行导致权限升级的代码。
solution:Upgrade vmware cloud_foundation to a higher version than 4.5,and avoid the version [4.0,4.5]; Upgrade vmware vrealize_operations to a higher version than 8.6.0,8.6.0:hotfix1,8.6.0:hotfix2,8.6.0:hotfix4,8.6.0:hotfix5,8.6.0:hotfix6,8.6.0:hotfix8,8.6.0:hotfix9,8.10.0,8.10.0:hotfix1,8.10.0:hotfix2,and avoid the version 8.6.0,8.6.0:hotfix1,8.6.0:hotfix2,8.6.0:hotfix4,8.6.0:hotfix5,8.6.0:hotfix6,8.6.0:hotfix8,8.6.0:hotfix9,8.10.0,8.10.0:hotfix1,8.10.0:hotfix2