Vulnerabilitycritical

Critical code execution bugs in WMware vRealize Log Insight

Security Affairsby @securityaffairsJan 24, 2023 · 23:25 UTC (Jan 24, 2023)1 min read2

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-31706 CVE-2022-31704 CVE-2022-31710 CVE-2022-31711

Tags: cve-2022-31706 cve-2022-31704 cve-2022-31710 cve-2022-31711 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-31706 +3 related CVEs CVE-2022-31704 CVE-2022-31710 CVE-2022-31711	The vRealize Log Insight contains a Directory Traversal Vulnerability	9.8 group max	87%		Jan 26, 2023

From the original article

1 min read at securityaffairs.com

A critical vulnerability in VMware vRealize Log Insight appliance can allow an unauthenticated attacker to take full control of a target system. VMware addressed multiple vulnerabilities, tracked as CVE-2022-31706, CVE-2022-31704, CVE-2022-31710, and CVE-2022-31711, in its vRealize Log Insight appliance.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.