Unscored CVE-2022-31675 EUVD-2022-53103GHSA-c3wc-hvmq-xmp6

VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be a…

Published Aug 9, 2022 · Updated Aug 3, 2024 · Assigned by vmware

Description

VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges.

Affected products

Vendor	Product	Affected	Fixed
—	VMware vRealize Operations	VMware vRealize Operations (8.x prior to 8.6.4)	—

References

https://www.vmware.com/security/advisories/VMSA-2022-0022.html