This KB documents the workaround steps for VMSA-2023-0001.
Please note that the workarounds described in this document are meant to provide temporary mitigation for the vulnerabilities disclosed in VMSA-2023-0001.
To fully remediate the vulnerabilities VMware vRealize Log Insight must be upgraded to 8.10.2.
Download the KB90635_3.zip file from here.
Note: The file is posted on the download page for VMware vRealize Log Insight 8.10.2 but the same scripts can be executed on all versions of VMware vRealize Log Insight 8.x. Please download the file from the above location for all supported versions.
This contains 2 files:
Please ensure that the correct file, KB90635_3.zip is downloaded.
To apply the workaround for VMSA-2023-0001, perform the following steps for each vRealize Log Insight node in the cluster.
Do NOT delete the KB90635.sh file after remediation. This file should remain at /opt/vmware/bin/KB90635.sh until the appliance is upgraded to version 8.10.2 or later.