CVE-2022-31706

2023-01-2500:00:00

vmware

www.cve.org

vrealize log insight

directory traversal

vulnerability

unauthenticated

remote code execution

AI Score

9.9

Confidence

High

EPSS

0.009

Percentile

83.1%

JSON

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "vRealize Log Insight (vRLI)",
    "versions": [
      {
        "version": "vRealize Log Insight 8.10.1 and prior",
        "status": "affected"
      }
    ]
  }
]