CVE-2022-31711

2023-01-2500:00:00

vmware

www.cve.org

vmware vrealize log insight

information disclosure

vulnerability

sensitive information

authentication

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.4%

JSON

VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sensitive session and application information without authentication.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "vRealize Log Insight (vRLI)",
    "versions": [
      {
        "version": "vRealize Log Insight 8.10.1 and prior",
        "status": "affected"
      }
    ]
  }
]