9.8
Critical
CVE-2022-31704 The vRealize Log Insight contains a broken access control vulnerability
Description
The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| vRealize Log Insight (vRLI) | Versions not published |
Other CVEs of vRealize Log Insight (vRLI)
The 5 CVEs of vRealize Log Insight (vRLI) →
CVE-2022-31710
vRealize Log Insight contains a deserialization vulnerability
7.5
High
CVE-2022-31711
VMware vRealize Log Insight contains an Information Disclosure Vulnerability
5.3
Medium
CVE-2022-31706
The vRealize Log Insight contains a Directory Traversal Vulnerability
9.8
Critical
CVE-2022-31703
The vRealize Log Insight contains a Directory Traversal Vulnerability
7.5
High