CVE-2022-31711

—

CVSS 3.1

5.3 medium

EPSS

22%p97

Published

Jan 26, 2023 (Jan 26, 2023)

Modified

Jun 17, 2026

Description

VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sensitive session and application information without authentication.

Vendors: vmware
Products: vrealize log insight
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (21.7%)

In the news6 stories

Critical VMware vRealize Log Insight flaws patched (CVE-2022-31706, CVE-2022-31704)

Help Net SecurityApr 24, 11:02 UTC · Apr 24, 2023Vulnerability CVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs1

VMware Releases Patches for Critical vRealize Log Insight Software Vulnerabilities

The Hacker NewsFeb 1, 02:51 UTC · Feb 1, 2023Vulnerability in the wildCVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs

Experts released VMware vRealize Log RCE exploit

Security AffairsJan 31, 18:44 UTC · Jan 31, 2023Vulnerability in the wildCVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs1

Experts plans to release VMware vRealize Log RCE exploit

Security AffairsJan 31, 16:55 UTC · Jan 31, 2023Vulnerability in the wildCVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs

Week in review: ChatGPT cybersecurity, critical RCE vulnerabilities found in git, Riot Games breached

Help Net SecurityJan 29, 00:00 UTC · Jan 29, 2023Data breach CVE-2022-42856 CVE-2022-31706 CVE-2022-31704+3 CVEs

Critical code execution bugs in WMware vRealize Log Insight

Security AffairsJan 24, 23:25 UTC · Jan 24, 2023Vulnerability CVE-2022-31706 CVE-2022-31704 CVE-2022-31710+1 CVEs1