Aria Automation use affected OpenSSH version by Multiple Vulnerabilities.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

CVE scanner found that Aria Automation has OpenSSH 8.9 affected by Multiple Vulnerabilities: CVE: CVE-2023-28531

Environment

Aria Automation 8.12.2.31329 (21949837)

Cause

All Aria Automation version released with OpenSSH 8.9p1-1 and below are affected by this Vulnerability.

Resolution

Photon OS 4 has been patched for this vulnerability. All Aria Automation versions which has OpenSSH version 8.9p1-2 or higher are  patched for this Vulnerability.