Vmware released security updates to address security vulnerabilities (CVE-2023-20858, CVE-2023-20855) in VMware Carbon Black App Control (App Control), VMware vRealize Orchestrator, VMware vRealize Automation and VMware Cloud Foundation (Cloud Foundation) products. A malicious actor could exploit these vulnerabilities to trigger elevation of privilege, data manipulation, security restriction bypass and sensitive information disclosure on the affected system.

More information on vulnerabilities and updates can be found in Vmware security advisories:

• VMSA-2023-0004
• VMSA-2023-0005