CVE-2022-31704
The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution.
Vendor | Product | Versions |
---|---|---|
vmware | vrealize_log_insight | 3.0, 3.0.1, 3.3, 3.3.1, 3.3.2, 3.6, 4.0, 4.3, 4.5, 4.5.1, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.8, 8.0.0, 8.1.0, 8.8.2 |