—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2023.3844
VMware SD-WAN update addresses a bypass authentication
vulnerability (CVE-2023-20899)
7 July 2023
===========================================================================
AusCERT Security Bulletin Summary
———————————
Product: VMware SD-WAN (Edge)
Publisher: VMWare
Operating System: Virtualisation
Resolution: Patch/Upgrade
CVE Names: CVE-2023-20899
Original Bulletin:
https://www.vmware.com/security/advisories/VMSA-2023-0015.html
Comment: CVSS (Max): 5.3 CVE-2023-20899 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
CVSS Source: VMware
Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
– ————————–BEGIN INCLUDED TEXT——————–
1. Impacted Products
VMware SD-WAN (Edge)
2. Introduction
An Authentication Bypass Vulnerability affecting VMware SD-WAN was privately
reported to VMware. Updates are available to address this vulnerability in
affected VMware products.
3. VMware SD-WAN Bypass Authentication Vulnerability (CVE-2023-20899)
Description
VMware SD-WAN contains a bypass authentication vulnerability. VMware has
evaluated the severity of this issue to be in the moderate severity range with
a maximum CVSSv3 base score of 5.3.
Known Attack Vectors
An unauthenticated attacker can download the Diagnostic bundle of the
application under VMware SD-WAN Management.
Resolution
To remediate CVE-2023-20899 apply the updates listed in the ‘Fixed Version’
column of the ‘Response Matrix’ below.
Workarounds
None
Additional Documentation
None
Notes
This vulnerability affects Edge devices only and not the SD-WAN management
console (VCO)
Acknowledgements
VMware would like to thank Marco Bruinenberg of Accenture for reporting this
issue to us.
Response Matrix
Product Version Running CVE Identifier CVSSv3 Severity Fixed Workarounds Additional
On Version Documentation
VMware
SD-WAN 5.2 Any CVE-2023-20899 N/A N/A Unaffected None None
(Edge)
VMware
SD-WAN 5.1.x Any CVE-2023-20899 N/A N/A Unaffected None None
(Edge)
VMware
SD-WAN 5.0.x Any CVE-2023-20899 5.3 moderate 5.1 None None
(Edge)
VMware
SD-WAN 4.5.x Any CVE-2023-20899 5.3 moderate 4.5.2 None None
(Edge)
4. References
Fixed Version(s) and Release Notes:
VMware SD-WAN 5.1 Release Notes: https://docs.vmware.com/en/VMware-SASE/5.1.0/
rn/vmware-sase-510-release-notes/index.html
VMware SD-WAN 4.5.2 Release Notes: https://docs.vmware.com/en/VMware-SASE/4.5.2
/rn/vmware-sase-452-release-notes/index.html
Downloads and Documentation:
https://customerconnect.vmware.com/en/downloads/info/slug/networking_security/
vmware_sd_wan/5_1_0
https://customerconnect.vmware.com/en/downloads/info/slug/networking_security/
vmware_sd_wan/4_5_2
Mitre CVE Dictionary Links:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20899
FIRST CVSSv3 Calculator:
CVE-2023-20899: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/
PR:N/UI:N/S:U/C:L/I:N/A:N
5. Change Log
2023-07-06 VMSA-2023-0015
Initial security advisory.
6. Contact
E-mail list for product security notifications and announcements:
https://lists.vmware.com/cgi-bin/mailman/listinfo/security-announce
This Security Advisory is posted to the following lists:
E-mail: [email protected]
PGP key at:
https://kb.vmware.com/kb/1055
VMware Security Advisories
https://www.vmware.com/security/advisories
VMware Security Response Policy
https://www.vmware.com/support/policies/security_response.html
VMware Lifecycle Support Phases
https://www.vmware.com/support/policies/lifecycle.html
VMware Security & Compliance Blog
https://blogs.vmware.com/security
Copyright 2023 VMware Inc. All rights reserved.
– ————————–END INCLUDED TEXT——————–
You have received this e-mail bulletin as a result of your organisation’s
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to [email protected]
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT’s members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation’s
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author’s website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: [email protected]
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
—–BEGIN PGP SIGNATURE—–
Comment: https://auscert.org.au/gpg-key/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=DY+y
—–END PGP SIGNATURE—–
Source: Read More
Security Bulletins