CVE-2022-31702

2022-12-1400:00:00

vmware

www.cve.org

vrni

command injection

rest api

network access

authentication

0.001 Low

EPSS

Percentile

48.9%

JSON

vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API. A malicious actor with network access to the vRNI REST API can execute commands without authentication.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "VMware vRealize Network Insight (vRNI)",
    "versions": [
      {
        "version": "6.x",
        "status": "affected"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2022-0031.html

0.001 Low

EPSS

Percentile

48.9%

JSON

Related for CVELIST:CVE-2022-31702