Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-31711

VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sensitive session and application information without authentication.

Published

2023-01-26T21:15:38.270

Last Modified

2025-04-01T16:15:16.383

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses

Type: Primary
NVD-CWE-noinfo
Type: Secondary
CWE-200

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	vmware	vrealize_log_insight	≤ 4.8	Yes
Application	vmware	vrealize_log_insight	< 8.10.2	Yes

References

http://packetstormsecurity.com/files/174606/VMware-vRealize-Log-Insight-Unauthenticated-Remote-Code-Execution.html ([email protected])
https://www.vmware.com/security/advisories/VMSA-2023-0001.html Patch, Vendor Advisory ([email protected])
http://packetstormsecurity.com/files/174606/VMware-vRealize-Log-Insight-Unauthenticated-Remote-Code-Execution.html (af854a3a-2127-422b-91ae-364da2661108)
https://www.vmware.com/security/advisories/VMSA-2023-0001.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)