Lucene search
HistoryDec 16, 2022 - 4:15 p.m.
CVE-2022-31708
vrealize operations
access control
vulnerability
cve-2022-31708
vmware
moderate severity
cvssv3 base score 4.4
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
36.5%
vRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4.
Affected configurations
Node
vmwarevrealize_operationsRange8.6.0–8.6.4.20823815
ORvmwarevrealize_operationsMatch8.10.0
Related
cve
cve
CVE-2022-31708
2022-12-16 16:15:21
zdi
zdi
cvelist
cvelist
CVE-2022-31708
2022-12-16 00:00:00
prion
prion
Improper access control
2022-12-16 16:15:00
vmware
vmware
nessus
nessus
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
36.5%
Related for NVD:CVE-2022-31708