CVE-2023-34037 Other in VMware Horizon Server
A malicious actor with network access can perform HTTP request smuggling attacks against VMware Horizon Server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-34037?
CVE-2023-34037 is a medium-severity vulnerability in VMware Horizon Server, published on 4 Aug 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
VMware Horizon Server contains a HTTP request smuggling vulnerability. A malicious actor with network access may be able to perform HTTP smuggle requests.
Weakness: CWE-444
Which versions are affected by CVE-2023-34037?
It affects 1 product.
Products include Vmware Horizon Client.
How do I fix CVE-2023-34037?
No fix has been published for CVE-2023-34037 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-34037 being exploited?
There is no known exploitation of CVE-2023-34037 in the wild and no public exploit code.
Other vulnerabilities in VMware Horizon Server
- CVE-2020-3961 Privilege escalation in VMware Horizon Client for Windows
- CVE-2019-5543 Privilege escalation in VMware Horizon Client for Windows
- CVE-2018-6964 Privilege escalation in Horizon Client for Linux
- CVE-2020-3991 Path traversal in VMware Horizon Client for Windows
- CVE-2021-21987 Information disclosure in VMware Workstation Pro / Player (Workstation), VMware Horizon Client for Windows
Sources
Also known as GHSA-329g-wg5g-524r.