CVE-2022-31704

2023-01-2500:00:00

vmware

www.cve.org

10 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.6%

JSON

The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "vRealize Log Insight (vRLI)",
    "versions": [
      {
        "version": "vRealize Log Insight 8.10.1 and prior",
        "status": "affected"
      }
    ]
  }
]