VMware fixes Critical Vulnerability in Carbon Black
Share this:
VMware has addressed a critical injection vulnerability, tracked as CVE-2023-20858 with a CVSSv3 score 9.1 resides in Carbon Black App Control.
VMware Carbon Black App Control allows organizations to ensure that only trusted and approved software is allowed to execute on their critical systems and endpoints.
An attacker with privileged access to the App Control administration console can trigger the issue by providing specially crafted input and gaining access to the underlying server operating system.
The vulnerability impacts App Control versions 8.7.x, 8.8.x, and 8.9.x for Microsoft’s Windows. The company addressed it with the release of versions 8.9.4, 8.8.6, 8.7.8.
VMware states that there are no workarounds for this vulnerability.
