9.8
Critical
CVE-2022-31702 vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API
Description
vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API. A malicious actor with network access to the vRNI REST API can execute commands without authentication.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vRealize Network Insight (vRNI) | 6.x | No fix stated |