CVE-2023-34060 is a critical authentication bypass vulnerability affecting VMware Cloud Director Appliance instances upgraded to version 10.5 from an older version, specifically impacting SSH (port 22) and the appliance management console (port 5480). This flaw, stemming from an outdated sssd version in Photon OS, allows unauthenticated attackers with network access to bypass login restrictions. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk of complete compromise (confidentiality, integrity, availability). While not currently listed in CISA KEV, the vulnerability has garnered significant community discussion and media coverage, indicating high awareness, though no public exploit code (Metasploit, Nuclei, ExploitDB) is yet available.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 10.5CPE matchmatch criteria | cpe:2.3:a:vmware:cloud_director:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.