VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in-the-middle (MITM) network positioning between vCenter server and the virtual machine may be able to bypass SAML token signature verification, to perform VMware Tools Guest Operations. CREATE(Triage):(User=admin) CVE-2023-20900 (https://nvd.nist.gov/vuln/detail/CVE-2023-20900)
