Lucene search

[email protected]CVE-2022-31710

HistoryJan 26, 2023 - 9:15 p.m.

CVE-2022-31710

2023-01-2621:15:38

CWE-502

[email protected]

web.nvd.nist.gov

cve-2022-31710

vrealize log insight

deserialization vulnerability

unauthenticated

remote exploit

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

39.3%

JSON

vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untrusted data which could result in a denial of service.

CPENameOperatorVersion
vmware:vrealize_log_insightvmware vrealize log insightle4.8
vmware:vrealize_log_insightvmware vrealize log insighteq4.6.1
vmware:vrealize_log_insightvmware vrealize log insighteq3.0.1
vmware:vrealize_log_insightvmware vrealize log insighteq4.8
vmware:vrealize_log_insightvmware vrealize log insighteq4.5
vmware:vrealize_log_insightvmware vrealize log insighteq3.3
vmware:vrealize_log_insightvmware vrealize log insighteq3.6
vmware:vrealize_log_insightvmware vrealize log insighteq3.3.1
vmware:vrealize_log_insightvmware vrealize log insighteq4.6.2
vmware:vrealize_log_insightvmware vrealize log insighteq4.7

CPE	Name	Operator	Version
vmware:vrealize_log_insight	vmware vrealize log insight	le	4.8
vmware:vrealize_log_insight	vmware vrealize log insight	eq	4.6.1
vmware:vrealize_log_insight	vmware vrealize log insight	eq	3.0.1
vmware:vrealize_log_insight	vmware vrealize log insight	eq	4.8
vmware:vrealize_log_insight	vmware vrealize log insight	eq	4.5
vmware:vrealize_log_insight	vmware vrealize log insight	eq	3.3
vmware:vrealize_log_insight	vmware vrealize log insight	eq	3.6
vmware:vrealize_log_insight	vmware vrealize log insight	eq	3.3.1
vmware:vrealize_log_insight	vmware vrealize log insight	eq	4.6.2
vmware:vrealize_log_insight	vmware vrealize log insight	eq	4.7

Rows per page:

1-10 of 211

References

www.vmware.com/security/advisories/VMSA-2023-0001.html

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

39.3%

JSON

Related for CVE-2022-31710

prion1 zdi1 nessus1 thn1 vmware1