Description
vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untrusted data which could result in a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | vRealize Log Insight (vRLI) | vRealize Log Insight 8.10.1 and prior | — |
Advisories 1
- WID-SEC-2023-0194 VMware vRealize Log Insight: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 31, 2023