VMware vRealize Operations 8.x < 8.6.4 Multiple Vulnerabilities (VMSA-2022-0022)

The version of VMware vRealize Operations vROps running on the remote host is 8.x prior to 8.6.4. It is, therefore, affected by a multiple vulnerabilities: - A malicious actor with administrative network access can escalate privileges to root. CVE-2022-31672 - A low-privileged malicious actor wit...

CVE-2022-31674

creationtimestamp| type| source ---|---|--- 2022-08-12 14:51:05+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6579 2022-09-07 19:00:04+00:00| seen| https://t.me/poxek/2470...

CVE-2022-31674

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure...

CVE-2022-31674

CVE-2022-31674 affects VMware vRealize Operations 8.x before 8.6.4. It is an information-disclosure vulnerability: a low-privileged, network-accessible attacker can access log files that reveal information. The issue is discussed alongside related CVEs (31672–31675) in VMware’s VMSA-2022-0022 adv...