DeutschShown in its original language — a full translation is planned for a future version.
VMware vRealize Log Insight: Mehrere Schwachstellen
view advisory published 2023-01-24
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware vRealize Log Insight ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service zu verursachen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-31711US | medium5.3 | Exploit | ||
VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sensitive session and application information without authentic… | ||||
| CVE-2022-31710US | high7.5 | — | ||
vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untrusted data which could result in a… | ||||
| CVE-2022-31706US | critical9.8 | Exploit | ||
The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which… | ||||
| CVE-2022-31704US | critical9.8 | Exploit | ||
The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance w… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan