9.8
Critique
CVE-2022-31704 The vRealize Log Insight contains a broken access control vulnerability
Description
The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| vRealize Log Insight (vRLI) | Versions non publiées |
Autres CVE de vRealize Log Insight (vRLI)
Les 5 CVE de vRealize Log Insight (vRLI) →
CVE-2022-31710
vRealize Log Insight contains a deserialization vulnerability
7.5
Élevée
CVE-2022-31711
VMware vRealize Log Insight contains an Information Disclosure Vulnerability
5.3
Moyenne
CVE-2022-31706
The vRealize Log Insight contains a Directory Traversal Vulnerability
9.8
Critique
CVE-2022-31703
The vRealize Log Insight contains a Directory Traversal Vulnerability
7.5
Élevée