CVE-2023-20858 — n/a / VMware Carbon Black App Control

Description (CNA)

VMware Carbon Black App Control 8.7.x prior to 8.7.8, 8.8.x prior to 8.8.6, and 8.9.x.prior to 8.9.4 contain an injection vulnerability. A malicious actor with privileged access to the App Control administration console may be able to use specially crafted input allowing access to the underlying server operating system.

Affected (CNA)

Vendor / product	Versions
n/a / VMware Carbon Black App Control	affected VMware Carbon Black App Control 8.7.x prior to 8.7.8, 8.8.x prior to 8.8.6, and 8.9.x.prior to 8.9.4

CWE

No CWE identifiers supplied.

References

https://www.vmware.com/security/advisories/VMSA-2023-0004.html

ADP enrichment

CVE

No English description supplied.

https://www.vmware.com/security/advisories/VMSA-2023-0004.html

CISA-ADP

No English description supplied.

No references supplied.