QID 378825

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation.

Affected Versions:
VMware Aria Operations for Networks 6.x versions prior to 6.11.

QID Detection Logic(Authenticated):
This QID checks for vulnerable VMware Operations for Networks target by checking the public SSH key in '/home/support/.ssh/authorized_keys' and comparing it with the public keys generated from the exploit .

Note: This is not a version based detection. Please note that this will flag a target as vulnerable if the public key for the private key pair of the public exploit is found on the target.

Successful exploitation of the vulnerability may allow an attacker to perform authentication bypass and login to the system as support user.