Skip to content
OpenAdvisories
High WID-SEC-2023-0194 4 CVEs

VMware vRealize Log Insight: Mehrere Schwachstellen

Published Jan 24, 2023 · Updated Jan 31, 2023 · Revision 2 · de-DE

Vendor: VMware Product: vRealize Log Insight < 8.10.2 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware vRealize Log Insight ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service zu verursachen.

Product

VMware vRealize Log Insight ermöglicht Echtzeit-Protokollmanagement und -Protokollanalysen über physische, virtuelle und Cloud-Umgebungen.

Vulnerabilities 4

  • Critical 9.8
    CVE-2022-31704 Public exploit Scanner template EPSS 81%

    The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotel…

  • Critical 9.8
    CVE-2022-31706 Public exploit Scanner template EPSS 87%

    The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject f…

  • High 7.5
    CVE-2022-31710

    vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger …

  • Medium 5.3
    CVE-2022-31711 Public exploit Scanner template EPSS 22%

    VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect se…

Revision history

  1. #2

    Exploits aufgenommen

  2. #1

    Initiale Fassung

References