CVE-2023-20889

CVE-2023-20889 is an information disclosure vulnerability in VMware Aria Operations for Networks (formerly vRealize Network Insight). An unauthenticated attacker with network access can exploit this flaw via command injection to gain sensitive information. Rated 7.5 HIGH on CVSS, this vulnerability is easily exploitable with low attack complexity and no user interaction required, leading to high confidentiality impact. While not yet listed on CISA's KEV catalog, its high EPSS score, FAUCET Risk Score, and significant community discussion (including Nuclei templates and media coverage of mass exploitation attempts) indicate a high likelihood of active exploitation.