CVE-2023-20899

Summary

VMware SD-WAN (Edge) contains a bypass authentication vulnerability. An unauthenticated attacker can download the Diagnostic bundle of the application under VMware SD-WAN Management.

Affected Software

VendorProductVersion RangeStatus
n/aVMware SD-WAN (Edge)VMware SD-WAN (Edge) 4.5.x, VMware SD-WAN (Edge) 5.xaffected

Weaknesses

  • Bypass Authentication

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References