{"metadata": {"vulnerability": "CVE-2023-34051", "count": 54, "kinds": {"milestone": 6, "sighting": 29, "kev": 0, "other": 19}}, "data": [{"timestamp": "2023-05-25T17:21:56.203Z", "date_only": false, "value": "2023-05-25T17:21:56.203Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-34051", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-10-19T22:00:00Z", "date_only": false, "value": "2023-10-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2721", "record": "WID-SEC-W-2023-2721", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-19T22:00:00Z", "date_only": false, "value": "2023-10-19T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2721", "record": "WID-SEC-W-2023-2721", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-19T22:00:00Z", "date_only": false, "value": "2023-10-19T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2721", "record": "WID-SEC-W-2023-2721", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-20T00:00:00Z", "date_only": false, "value": "2023-10-20T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0870", "record": "CERTFR-2023-AVI-0870", "field": "last_revision_date"}, {"timestamp": "2023-10-20T00:00:00Z", "date_only": false, "value": "2023-10-20T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0870", "record": "CERTFR-2023-AVI-0870", "field": "initial_release_date"}, {"timestamp": "2023-10-20T00:00:00Z", "date_only": false, "value": "2023-10-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0870", "record": "CERTFR-2023-AVI-0870", "field": "revisions.0.revision_date"}, {"timestamp": "2023-10-20T04:11:52.777Z", "date_only": false, "value": "2023-10-20T04:11:52.777Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-34051", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-10-20T04:11:52.777Z", "date_only": false, "value": "2023-10-20T04:11:52.777Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "CVE-2023-34051", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-10-20T05:15:00Z", "date_only": false, "value": "2023-10-20T05:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-34051", "record": "GSD-2023-34051", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-10-20T05:15:07Z", "date_only": false, "value": "2023-10-20T05:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GHVX-5V39-7HV5", "record": "GHSA-GHVX-5V39-7HV5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-10-20T05:15:07.943Z", "date_only": false, "value": "2023-10-20T05:15:07.943", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-34051", "record": "FKIE_CVE-2023-34051", "field": "published"}, {"timestamp": "2023-10-20T06:30:19Z", "date_only": false, "value": "2023-10-20T06:30:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GHVX-5V39-7HV5", "record": "GHSA-GHVX-5V39-7HV5", "field": "published"}, {"timestamp": "2023-10-20T19:16:49Z", "date_only": false, "value": "2023-10-20T19:16:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ctinow/144469", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "fa14f105-746d-4425-8e85-f70ed653d286", "content": "https://ift.tt/n6giV3k\nVMware Aria Operations for Logs CVE-2023-34051 Technical Deep Dive and IOCs", "url": "https://t.me/ctinow/144469"}, {"timestamp": "2023-10-21T06:50:53Z", "date_only": false, "value": "2023-10-21T06:50:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1788", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "87fe3c2e-5154-4b97-8ce5-f5ff8b45c0c8", "content": "CVE-2023-34051\nVMware Aria Operations for Logs \n*\nTechnical Deep\n*\nExploit\n\n\n#vmware #bypass #exploit", "url": "https://t.me/proxy_bar/1788"}, {"timestamp": "2023-10-21T17:07:26Z", "date_only": false, "value": "2023-10-21T17:07:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9238", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "cfc02099-72ee-4df9-a7b8-54e66360abff", "content": "#exploit\n1. CVE-2023-34051:\nVMware Aria Operations for Logs - authentication bypass\nhttps://github.com/horizon3ai/CVE-2023-34051\n\n2. CVE-2023-28432:\nMinIO information disclosure\nhttps://github.com/yTxZx/CVE-2023-28432", "url": "https://t.me/CyberSecurityTechnologies/9238"}, {"timestamp": "2023-10-22T07:14:27Z", "date_only": false, "value": "2023-10-22T07:14:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/150", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "c4dc81e8-d8c8-4dd6-87b1-9da0da2eb484", "content": "\u2604\ufe0fCVE-2023-34051: VMware Aria Operations for Logs\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043e\u0442 root\ud83d\udc80\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 PoC:\nhttps://github.com/horizon3ai/CVE-2023-34051\n\n\ud83d\udcdd\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0440\u0435\u0441\u0435\u0440\u0447:\nhttps://www.horizon3.ai/vmware-aria-operations-for-logs-cve-2023-34051-technical-deep-dive-and-iocs/\n\n#cve #poc #exploit", "url": "https://t.me/ap_security/150"}, {"timestamp": "2023-10-22T07:14:27Z", "date_only": false, "value": "2023-10-22T07:14:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/208", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "0a8df280-fd84-49e6-863a-abccbf2a176a", "content": "\u2604\ufe0fCVE-2023-34051: VMware Aria Operations for Logs\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043e\u0442 root\ud83d\udc80\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 PoC:\nhttps://github.com/horizon3ai/CVE-2023-34051\n\n\ud83d\udcdd\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0440\u0435\u0441\u0435\u0440\u0447:\nhttps://www.horizon3.ai/vmware-aria-operations-for-logs-cve-2023-34051-technical-deep-dive-and-iocs/\n\n#cve #poc #exploit", "url": "https://t.me/ap_security/208"}, {"timestamp": "2023-10-22T23:08:41Z", "date_only": false, "value": "2023-10-22T23:08:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/E_yspdvD2OkGzVpTzZE5pT7_xF8O16klvXLRVGJdEx8V", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "954e7557-8784-41fd-bc8e-c75c7d0d6dec"}, {"timestamp": "2023-10-23T22:00:00Z", "date_only": false, "value": "2023-10-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2721", "record": "WID-SEC-W-2023-2721", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-10-23T22:00:00Z", "date_only": false, "value": "2023-10-23T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2721", "record": "WID-SEC-W-2023-2721", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-10-25T07:27:05Z", "date_only": false, "value": "2023-10-25T07:27:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/11817", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "8282c813-4e32-4f58-8f34-11a23dd3f63d", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 PoC Exploits Released for Citrix and VMware Vulnerabilities.\n\nTracked as CVE-2023-34051 (CVSS score: 8.1), the high-severity vulnerability relates to a case of authentication bypass that could lead to remote code execution.\n\nhttps://thehackernews.com/2023/10/alert-poc-exploits-released-for-citrix.html", "url": "https://t.me/cKure/11817"}, {"timestamp": "2023-10-25T09:52:24Z", "date_only": false, "value": "2023-10-25T09:52:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KomunitiSiber/978", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "00a91a38-d18a-4a40-ab96-cf190bf57327", "content": "Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities\nhttps://thehackernews.com/2023/10/alert-poc-exploits-released-for-citrix.html\n\nVirtualization services provider VMware has alerted customers to the existence of a proof-of-concept (PoC) exploit for a recently patched security flaw in Aria Operations for Logs.\nTracked as CVE-2023-34051 (CVSS score: 8.1), the high-severity vulnerability relates to a case of authentication bypass that could lead to remote code execution.\n\"An unauthenticated, malicious actor can inject files", "url": "https://t.me/KomunitiSiber/978"}, {"timestamp": "2023-10-25T10:56:30Z", "date_only": false, "value": "2023-10-25T10:56:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/zV2tRAbZHPZ4_cDRBFXL3KwLw_SkAtgy_XvKi401zOkJew", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "84288dae-36cd-4dec-9d81-3b050769940c"}, {"timestamp": "2023-10-25T13:20:05Z", "date_only": false, "value": "2023-10-25T13:20:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5005", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "62d50ad8-f475-4780-9b0f-dc1e30fea4e9", "content": "VMware \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 vRealize Log Insight (VMware Aria Operations for Logs), \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d PoC.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a\u00a0CVE-2023-34051, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043f\u0440\u0438 \u0441\u043e\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Horizon3, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u043e\u0448\u0438\u0431\u043a\u0443, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043d\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0438\u043b\u0438 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430.\n\nHorizon3 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430\u00a0\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u0440\u0438\u0447\u0438\u043d\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2023-34051 \u0434\u043b\u044f RCE \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 VMware.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438\u00a0PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u00a0\u0438 \u0441\u043f\u0438\u0441\u043e\u043a IOC \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430.\n\n\u0410\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438  \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c\u0438 \u0442\u043e\u0447\u043a\u0430\u043c\u0438 Thrift RPC \u0434\u043b\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0437\u0430\u0434\u0430\u043d\u0438\u0435 cron \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0444\u0430\u0439\u043b \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441\u043e \u0441\u0440\u0435\u0434\u043e\u0439.\n\n\u0427\u0442\u043e\u0431\u044b \u044d\u0442\u0430 \u0430\u0442\u0430\u043a\u0430 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0442\u043e\u0442 \u0436\u0435 IP-\u0430\u0434\u0440\u0435\u0441, \u0447\u0442\u043e \u0438 \u0433\u043b\u0430\u0432\u043d\u044b\u0439/\u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u0443\u0437\u0435\u043b.\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e \u0441\u0443\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u0445\u043e\u0434\u043e\u043c\u00a0\u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a,\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 VMware \u0432 \u044f\u043d\u0432\u0430\u0440\u0435, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c RCE.\n\n\u041f\u0435\u0440\u0432\u0430\u044f (CVE-2022-31706) - \u044d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0431\u0445\u043e\u0434\u0430 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430, \u0432\u0442\u043e\u0440\u0430\u044f (CVE-2022-31704) - \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0430 \u0442\u0440\u0435\u0442\u044c\u044f \u2014 \u043e\u0448\u0438\u0431\u043a\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-31711).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 VMware \u043a\u0430\u043a\u00a0VMSA-2023-0001) \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u041e\u0421 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0435 \u041f\u041e Aria Operations for Logs.\n\n\u0422\u043e\u0433\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f VMSA-2023-0001 Horizon3 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0449\u0438\u0439 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c\u0438 \u0442\u043e\u0447\u043a\u0430\u043c\u0438 Thrift RPC \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u042d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u0435\u0433\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c, \u043e\u0434\u043d\u0430\u043a\u043e \u043e\u043d\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0434\u043b\u044f \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0432\u0440\u044f\u0434 \u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u0443\u0434\u0435\u0442 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u0442\u044c\u0441\u044f \u0433\u0434\u0435-\u0442\u043e \u0432 \u0441\u0435\u0442\u0438.\n\n\u041d\u043e \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u043d\u0435\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0434\u043b\u044f \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 VMware \u0446\u0435\u043d\u043d\u044b\u043c\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438.", "url": "https://t.me/true_secator/5005"}, {"timestamp": "2023-10-30T15:28:00Z", "date_only": false, "value": "2023-10-30T15:28Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-34051", "record": "GSD-2023-34051", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:30.731Z", "date_only": false, "value": "2023-12-13T01:20:30.731034Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-34051", "record": "GSD-2023-34051", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T16:01:52.417Z", "date_only": false, "value": "2024-08-02T16:01:52.417Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-34051", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:00:21.366Z", "date_only": false, "value": "2024-08-15T18:00:21.366+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2721", "record": "WID-SEC-W-2023-2721", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:37:52Z", "date_only": false, "value": "2024-08-16T08:37:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1449", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "817377ee-78ac-43a1-8f68-32bcc630c1fb", "content": "CVE-2023-34051 : VMware Aria Operations for Logs\u00a0 - Authentication Bypass\n\nPOC : https://github.com/horizon3ai/CVE-2023-34051\n\nTechnical Analysis : https://www.horizon3.ai/vmware-aria-operations-for-logs-cve-2023-34051-technical-deep-dive\n\nIndicators of Compromise : https://www.horizon3.ai/vmware-vrealize-cve-2022-31706-iocs/", "url": "https://t.me/Rootsec_2/1449"}, {"timestamp": "2024-08-16T08:37:53Z", "date_only": false, "value": "2024-08-16T08:37:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1453", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "5e8d33ce-2bc0-4b58-a3af-caaa54dad80b", "content": "#exploit\n1. CVE-2023-34051:\nVMware Aria Operations for Logs - authentication bypass\nhttps://github.com/horizon3ai/CVE-2023-34051\n\n2. CVE-2023-28432:\nMinIO information disclosure\nhttps://github.com/yTxZx/CVE-2023-28432", "url": "https://t.me/Rootsec_2/1453"}, {"timestamp": "2025-04-23T13:26:59.723Z", "date_only": false, "value": "2025-04-23T13:26:59.723332Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-34051", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-23T13:26:59.723Z", "date_only": false, "value": "2025-04-23T13:26:59.723332Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-34051", "record": "FKIE_CVE-2023-34051", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-02T18:30:37.399Z", "date_only": false, "value": "2025-05-02T18:30:37.399Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-34051", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-02T18:30:37.399Z", "date_only": false, "value": "2025-05-02T18:30:37.399Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-34051", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-02T21:30:41Z", "date_only": false, "value": "2025-05-02T21:30:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GHVX-5V39-7HV5", "record": "GHSA-GHVX-5V39-7HV5", "field": "modified"}, {"timestamp": "2026-06-17T06:02:49.550Z", "date_only": false, "value": "2026-06-17T06:02:49.550", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-34051", "record": "FKIE_CVE-2023-34051", "field": "lastModified"}, {"timestamp": "2026-07-06T11:00:15.298Z", "date_only": false, "value": "2026-07-06T11:00:15.298918Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/75", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "2d239d87-01d3-43bf-a7a7-34ebf2fa896a", "url": "https://t.me/ZerodayAlert/75"}, {"timestamp": "2026-07-07T00:00:23.668Z", "date_only": false, "value": "2026-07-07T00:00:23.668468Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/75", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "2d6b9be4-a680-48fe-a945-e86105b7db67", "url": "https://t.me/ZerodayAlert/75"}, {"timestamp": "2026-07-12T05:00:04.990Z", "date_only": false, "value": "2026-07-12T05:00:04.990829Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/75", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "976525bd-10a2-435f-a477-a182fdec9d26", "url": "https://t.me/ZerodayAlert/75"}, {"timestamp": "2026-07-13T00:00:52.456Z", "date_only": false, "value": "2026-07-13T00:00:52.456103Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/75", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "54aa868b-ecc7-4c0a-a7aa-1ad39b71add2", "url": "https://t.me/ZerodayAlert/75"}, {"timestamp": "2026-07-29T12:01:08.068Z", "date_only": false, "value": "2026-07-29T12:01:08.068410Z", "kind": "sighting", "label": "Seen", "source": "Telegram/fJfDr9s7BO6mdaeg8_SVJfb7Ck63rNOr0-0CKpZazNEHKeo", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "11af8bc1-a6b1-40b3-89d1-c015fa1d69cb"}, {"timestamp": "2026-07-29T12:02:23.803Z", "date_only": false, "value": "2026-07-29T12:02:23.803695Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3849", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "e38769d4-32d1-4632-b77b-fc589b73dae3", "url": "https://t.me/reverseame/3849"}, {"timestamp": "2026-07-30T00:01:47.620Z", "date_only": false, "value": "2026-07-30T00:01:47.620333Z", "kind": "sighting", "label": "Seen", "source": "Telegram/fJfDr9s7BO6mdaeg8_SVJfb7Ck63rNOr0-0CKpZazNEHKeo", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "5e53bdee-2a24-4c36-a260-6670c9d84db2"}, {"timestamp": "2026-07-30T00:02:26.066Z", "date_only": false, "value": "2026-07-30T00:02:26.066729Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3849", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "905d8a18-347f-4ede-b9dc-42836cdb7545", "url": "https://t.me/reverseame/3849"}, {"timestamp": "2026-08-01T09:00:06.289Z", "date_only": false, "value": "2026-08-01T09:00:06.289243Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fJfDr9s7BO6mdaeg8_SVJfb7Ck63rNOr0-0CKpZazNEHKeo", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "cace85dc-c1b1-46ed-bde7-1b9ca277debc"}, {"timestamp": "2026-08-02T00:01:11.502Z", "date_only": false, "value": "2026-08-02T00:01:11.502993Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fJfDr9s7BO6mdaeg8_SVJfb7Ck63rNOr0-0CKpZazNEHKeo", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "2f55dcec-aa44-4e80-8c93-80982b9ced68"}, {"timestamp": "2026-08-02T12:02:14.249Z", "date_only": false, "value": "2026-08-02T12:02:14.249180Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3849", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "b0fadc6f-4bf6-4e36-b0c2-764890f6808f", "url": "https://t.me/reverseame/3849"}, {"timestamp": "2026-08-03T02:07:11.591Z", "date_only": false, "value": "2026-08-03T02:07:11.591115Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3849", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "b4195137-098d-400d-a428-e9887f3e4d60", "url": "https://t.me/reverseame/3849"}, {"timestamp": "2026-09-01T17:00:16.493Z", "date_only": false, "value": "2026-09-01T17:00:16.493133Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7285", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "a6073c4b-581f-409e-8929-8a3175adf09b", "url": "https://t.me/cissp/7285"}, {"timestamp": "2026-09-01T20:00:45.268Z", "date_only": false, "value": "2026-09-01T20:00:45.268994Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/124202", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "1bae17c5-d48f-402e-81e2-c9b5fd45f300", "url": "https://t.me/hacking_Attack/124202"}, {"timestamp": "2026-09-05T07:00:03.472Z", "date_only": false, "value": "2026-09-05T07:00:03.472352Z", "kind": "sighting", "label": "Seen", "source": "Telegram/2eYI3kydhy2vINEp3t56cRydhJ76_zk_ie_6JAnVgb8wzKU", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "c57ab184-6b2b-4a33-a9fb-6f345f58e4d1"}, {"timestamp": "2026-09-06T00:00:54.141Z", "date_only": false, "value": "2026-09-06T00:00:54.141073Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/2eYI3kydhy2vINEp3t56cRydhJ76_zk_ie_6JAnVgb8wzKU", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "7e49abf8-949f-4699-88b7-6e22f5c5b015"}, {"timestamp": "2026-09-09T19:13:04.966Z", "date_only": false, "value": "2026-09-09T19:13:04.966413Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/7285", "record": "CVE-2023-34051", "field": "creation_timestamp", "uuid": "f36080f0-29b9-489a-bdbe-4871a347ad77", "url": "https://t.me/cissp/7285"}]}