VulnerabilitycriticalExploited in the wild

VMware Releases Patches for Critical vRealize Log Insight Software Vulnerabilities

The Hacker Newsby @TheHackersNewsFeb 1, 2023 · 02:51 UTC (Feb 1, 2023)2 min read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-31706 CVE-2022-31704 CVE-2022-31710 CVE-2022-31711

Tags: cve-2022-31706 cve-2022-31704 cve-2022-31710 cve-2022-31711 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-31706 +3 related CVEs CVE-2022-31704 CVE-2022-31710 CVE-2022-31711	The vRealize Log Insight contains a Directory Traversal Vulnerability	9.8 group max	87%		Jan 26, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jan 25, 2023 Software Security / VMware VMware on Tuesday released software to remediate four security vulnerabilities affecting vRealize Log Insight (aka Aria Operations for Logs) that could expose users to remote code execution attacks. Two of the flaws are critical, carrying a severity rating of 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.