CVE-2023-34038 - Vulnerability Details - OpenCVE

VMware Horizon Server contains an information disclosure vulnerability. A malicious actor with network access may be able to access information relating to the internal network configuration.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00535.

Key SSVC decision points have not yet been added.

Vendors	Products
Vmware	Horizon Client

Configuration 1 [-]

OR	cpe:2.3:a:vmware:horizon_client:2006:::::::*
	cpe:2.3:a:vmware:horizon_client:2012:::::::*
	cpe:2.3:a:vmware:horizon_client:2103:::::::*
	cpe:2.3:a:vmware:horizon_client:2106:::::::*
	cpe:2.3:a:vmware:horizon_client:2111:::::::*
	cpe:2.3:a:vmware:horizon_client:2111.1:::::::*
	cpe:2.3:a:vmware:horizon_client:2203:::::::*
	cpe:2.3:a:vmware:horizon_client:2212:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2023-38159	VMware Horizon Server contains an information disclosure vulnerability. A malicious actor with network access may be able to access information relating to the internal network configuration.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.vmware.com/security/advisories/VMSA-2023-0017.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: vmware

Published: 2023-08-04T11:24:57.885Z

Updated: 2024-08-02T15:54:14.136Z

Reserved: 2023-05-25T17:21:56.201Z

Link: CVE-2023-34038

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-08-04T12:15:10.217

Modified: 2024-11-21T08:06:27.057

Link: CVE-2023-34038

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-34038", "assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "state": "PUBLISHED", "assignerShortName": "vmware", "dateReserved": "2023-05-25T17:21:56.201Z", "datePublished": "2023-08-04T11:24:57.885Z", "dateUpdated": "2024-08-02T15:54:14.136Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "VMware Horizon Server", "vendor": "n/a", "versions": [{"status": "affected", "version": "Horizon Server 2306, Horizon Server 2303, Horizon Server 2212, Horizon Server 2209, Horizon Server 2206, Horizon Server 2111.x, Horizon Server 2106, Horizon Server 2103, Horizon Server 2012, Horizon Server 2006"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "VMware Horizon Server contains an information disclosure vulnerability. A malicious actor with network access may be able to access information relating to the internal network configuration.<br><br>"}], "value": "VMware Horizon Server contains an information disclosure vulnerability. A malicious actor with network access may be able to access information relating to the internal network configuration.\n\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"description": "Information disclosure vulnerability", "lang": "en"}]}], "providerMetadata": {"orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware", "dateUpdated": "2023-08-04T11:24:57.885Z"}, "references": [{"url": "https://www.vmware.com/security/advisories/VMSA-2023-0017.html"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T15:54:14.136Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.vmware.com/security/advisories/VMSA-2023-0017.html", "tags": ["x_transferred"]}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vmware:horizon_client:2006:*:*:*:*:*:*:*", "matchCriteriaId": "7ABDAB76-D9B4-4677-A489-AB8679C826A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:horizon_client:2012:*:*:*:*:*:*:*", "matchCriteriaId": "A67E7F43-E1B4-4C36-819F-758242C62692", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:horizon_client:2103:*:*:*:*:*:*:*", "matchCriteriaId": "4E58D474-F936-49F0-A94A-F58EC1ECB076", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:horizon_client:2106:*:*:*:*:*:*:*", "matchCriteriaId": "EBDBA771-953F-4994-8FAB-A0CFBF007C08", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:horizon_client:2111:*:*:*:*:*:*:*", "matchCriteriaId": "57471903-7385-441C-A8C4-19BD02EDACD5", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:horizon_client:2111.1:*:*:*:*:*:*:*", "matchCriteriaId": "E3BAFD5F-6559-45DC-BC66-C9CEEBF4DD3F", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:horizon_client:2203:*:*:*:*:*:*:*", "matchCriteriaId": "0E2E38F7-9453-45C8-A8D7-48F16ED63C5A", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:horizon_client:2212:*:*:*:*:*:*:*", "matchCriteriaId": "8C6C858A-FB4C-43CF-9924-670CE4699F51", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "VMware Horizon Server contains an information disclosure vulnerability. A malicious actor with network access may be able to access information relating to the internal network configuration.\n\n"}, {"lang": "es", "value": "VMware Horizon Server contiene una vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n. Un actor malicioso con acceso a la red puede ser capaz de acceder a informaci\u00f3n relativa a la configuraci\u00f3n de la red interna."}], "id": "CVE-2023-34038", "lastModified": "2024-11-21T08:06:27.057", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security@vmware.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-08-04T12:15:10.217", "references": [{"source": "security@vmware.com", "tags": ["Vendor Advisory"], "url": "https://www.vmware.com/security/advisories/VMSA-2023-0017.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.vmware.com/security/advisories/VMSA-2023-0017.html"}], "sourceIdentifier": "security@vmware.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}