CVE-2023-34056 VMware vCenter Server Partial Information Disclosure Vulnerability

What is CVE-2023-34056?

CVE-2023-34056 is a medium-severity vulnerability in Vmware Vcenter Server, published on 25 Oct 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

vCenter Server contains a partial information disclosure vulnerability. A malicious actor with non-administrative privileges to vCenter Server may leverage this issue to access unauthorized data.

Weakness: CWE-922

Which versions are affected by CVE-2023-34056?

It affects 1 product.

Products include Vmware Vcenter Server.

How do I fix CVE-2023-34056?

No fix has been published for CVE-2023-34056 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-34056 being exploited?

There is no known exploitation of CVE-2023-34056 in the wild and no public exploit code.

Other vulnerabilities in Vmware Vcenter Server

• CVE-2026-59310 Broadcom VMware vCenter Path Traversal Exploited Critical 9.8
• CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Exploited Critical 9.8
• CVE-2020-3952 VMware vCenter Server Information Disclosure Exploited Critical 9.8
• CVE-2021-22017 VMware vCenter Server Improper Access Control Exploited Medium 5.3
• CVE-2015-2342 Code injection in n/a Critical 10.0

All Vmware Vcenter Server vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6cr3-pfhw-g3c7.