CVE:CVE-2023-20865
CNNVD:CNNVD-202304-1730
VMware Aria Operations for Logs是美国威睿（VMware）公司的一套集中式日志管理解决方案。该产品支持日志整理和日志分析等功能。
VMware Aria Operations for Logs存在安全漏洞，该漏洞源于存在命令注入漏洞，攻击者利用该漏洞可以以root身份执行任意命令。
solution:Upgrade vmware aria_operations_for_logs to a higher version than 8.12.0,and avoid the version [8.6.0,8.12.0); Upgrade vmware cloud_foundation to a higher version than 4.5,and avoid the version [4.0,4.5]