CVE-2023-34038 Information disclosure in VMware Horizon Server
A malicious actor with network access can disclose internal network configuration information from VMware Horizon Server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-34038?
CVE-2023-34038 is a medium-severity vulnerability in VMware Horizon Server, published on 4 Aug 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
VMware Horizon Server contains an information disclosure vulnerability. A malicious actor with network access may be able to access information relating to the internal network configuration.
Which versions are affected by CVE-2023-34038?
It affects 1 product.
Products include Vmware Horizon Client.
How do I fix CVE-2023-34038?
No fix has been published for CVE-2023-34038 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-34038 being exploited?
There is no known exploitation of CVE-2023-34038 in the wild and no public exploit code.
Other vulnerabilities in VMware Horizon Server
- CVE-2020-3961 Privilege escalation in VMware Horizon Client for Windows
- CVE-2019-5543 Privilege escalation in VMware Horizon Client for Windows
- CVE-2018-6964 Privilege escalation in Horizon Client for Linux
- CVE-2020-3991 Path traversal in VMware Horizon Client for Windows
- CVE-2021-21987 Information disclosure in VMware Workstation Pro / Player (Workstation), VMware Horizon Client for Windows
Sources
Also known as GHSA-7qrx-qc95-8fxc.