VulnerabilityhighExploited in the wild

Experts plans to release VMware vRealize Log RCE exploit

Security Affairsby @securityaffairsJan 31, 2023 · 16:55 UTC (Jan 31, 2023)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-31706 CVE-2022-31704 CVE-2022-31710 CVE-2022-31711

Tags: cve-2022-31706 cve-2022-31704 cve-2022-31710 cve-2022-31711 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-31706 +3 related CVEs CVE-2022-31704 CVE-2022-31710 CVE-2022-31711	The vRealize Log Insight contains a Directory Traversal Vulnerability	9.8 group max	87%		Jan 26, 2023

From the original article

2 min read at securityaffairs.com

Horizon3’s Attack Team made the headlines again announcing the release of a PoC exploit code for remote code execution in VMware vRealize Log. Researchers from the Horizon3’s Attack Team announced the release of PoC exploit code for remote code execution in VMware vRealize Log. The PoC exploit code will trigger a series of flaws in VMware vRealize Log to achieve remote code execution on vulnerable installs.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.