Lucene search

VmwareCVELIST:CVE-2022-31703

HistoryDec 14, 2022 - 12:00 a.m.

CVE-2022-31703

2022-12-1400:00:00

vmware

www.cve.org

vrealize log insight

directory traversal

vulnerability

remote code execution

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

49.6%

JSON

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "vRealize Log Insight (vRLI)",
    "versions": [
      {
        "version": "vRealize Log Insight 8.10.1 and prior",
        "status": "affected"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2023-0001.html