OpenSSH Vulnerability CVE-2023-28531 for VMware Identity Manager 3.3.7

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

CVE-2023-28531 describes a vulnerability that affects OpenSSH version 8.9 to 9.2.

NIST: https://nvd.nist.gov/vuln/detail/CVE-2023-28531#range-17413060

Environment

VMware Identity Manager 3.3.7

Resolution

For Photon OS 4, the above CVE is resolved on version 8.9p1-1

 

Additional Information

For more details about your specific version, please consult our KB on Investigating vulnerability CVEs for PhotonOS-based appliances