VMware vRealize Operations 8.x < 8.6.4 Multiple Vulnerabilities (VMSA-2022-0022)

The version of VMware vRealize Operations vROps running on the remote host is 8.x prior to 8.6.4. It is, therefore, affected by a multiple vulnerabilities: - A malicious actor with administrative network access can escalate privileges to root. CVE-2022-31672 - A low-privileged malicious actor wit...

CVE-2022-31672

VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root...

Vulnerabilities fixed in VMware vRealize Operations

Vulnerabilities have been fixed in VMware vRealize Operations. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Bypassing authentication. Remote code execution Administrator/Root privileges Access to sensitive data...

CVE-2022-31672

CVE-2022-31672 affects VMware vRealize Operations (vROps) 8.x prior to 8.6.4. A malicious actor with administrative network access can escalate privileges to root (Privilege Escalation). Additional related CVEs in the same VMSA-2022-0022 advisory include CVE-2022-31673 / 31674 / 31675, indicating...