CVE-2022-31704

—

CVSS 3.1

9.8 critical

EPSS

81%p100

Published

Jan 26, 2023 (Jan 26, 2023)

Modified

Jun 17, 2026

Description

The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution.

Vendors: vmware
Products: vrealize log insight
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (81.0%)

In the news7 stories

Critical VMware vRealize Log Insight flaws patched (CVE-2022-31706, CVE-2022-31704)

Help Net SecurityApr 24, 11:02 UTC · Apr 24, 2023Vulnerability CVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs1

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

The Hacker NewsApr 21, 05:41 UTC · Apr 21, 2023Vulnerability CVE-2023-20036 CVE-2023-20039 CVE-2023-20154+4 CVEs

VMware Releases Patches for Critical vRealize Log Insight Software Vulnerabilities

The Hacker NewsFeb 1, 02:51 UTC · Feb 1, 2023Vulnerability in the wildCVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs

Experts released VMware vRealize Log RCE exploit

Security AffairsJan 31, 18:44 UTC · Jan 31, 2023Vulnerability in the wildCVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs1

Experts plans to release VMware vRealize Log RCE exploit

Security AffairsJan 31, 16:55 UTC · Jan 31, 2023Vulnerability in the wildCVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs

Week in review: ChatGPT cybersecurity, critical RCE vulnerabilities found in git, Riot Games breached

Help Net SecurityJan 29, 00:00 UTC · Jan 29, 2023Data breach CVE-2022-42856 CVE-2022-31706 CVE-2022-31704+3 CVEs

Critical code execution bugs in WMware vRealize Log Insight

Security AffairsJan 24, 23:25 UTC · Jan 24, 2023Vulnerability CVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs1