CVE-2023-34039

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.

• CWE-327

• http://packetstormsecurity.com/files/174452/VMWare-Aria-Operations-For-Networks-Remote-Code-Execution.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/175320/VMWare-Aria-Operations-For-Networks-SSH-Private-Key-Exposure.htmlExploit, Third Party Advisory, VDB Entry
• https://www.vmware.com/security/advisories/VMSA-2023-0018.htmlPatch, Vendor Advisory
• http://packetstormsecurity.com/files/174452/VMWare-Aria-Operations-For-Networks-Remote-Code-Execution.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/175320/VMWare-Aria-Operations-For-Networks-SSH-Private-Key-Exposure.htmlExploit, Third Party Advisory, VDB Entry
• https://www.vmware.com/security/advisories/VMSA-2023-0018.htmlPatch, Vendor Advisory

Published

Aug 29, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34033Cross-Site Request Forgery (CSRF) vulnerability in Malinky A…8.8
• CVE-2023-34034Using "**" as a pattern in Spring Security configuration fo…9.8
• CVE-2023-34035Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.…5.3
• CVE-2023-34036 Reactive web applications that use Spring HATEOAS to produc…5.3
• CVE-2023-34037VMware Horizon Server contains a HTTP request smuggling vuln…5.3
• CVE-2023-34038VMware Horizon Server contains an information disclosure vul…5.3
• CVE-2023-3404The ProfileGrid plugin for WordPress is vulnerable to unauth…4.9
• CVE-2023-34040In Spring for Apache Kafka 3.0.9 and earlier and versions 2.…7.8
• CVE-2023-34041Cloud foundry routing release versions prior to 0.278.0 are …5.3
• CVE-2023-34042The spring-security.xsd file inside the spring-security-con…5.5
• CVE-2023-34043VMware Aria Operations contains a local privilege escalation…6.7
• CVE-2023-34044VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prio…6