VMware vRealize Network Insight (vRNI) Multiple Vulnerabilities (VMSA-2022-0031)

According to its self-reported version, the instance of VMware vRealize Network Insight running on the remote web server is affected by multiple vulnerabilities: - vRealize Network Insight vRNI contains a command injection vulnerability present in the vRNI REST API. A malicious actor with network...

CVE-2022-31703

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution...

CVE-2022-31703

creationtimestamp| type| source ---|---|--- 2022-12-14 08:14:08+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus27/2022 2022-12-14 22:22:52+00:00| seen| https://t.me/cibsecurity/54550 2023-01-25 13:47:26+00:00| seen| https://t.me/truesecator/3983...

CVE-2022-31703

The CVE-2022-31703 entry concerns a Directory Traversal Vulnerability in VMware products that, per the documents, allows an unauthenticated attacker to inject files into the operating system of VMware vRealize Log Insight (and related vRNI REST API endpoints), potentially leading to remote code e...

VMSA-2022-0031:VMware vRealize Network Insight (vRNI) updates address command injection and directory traversal security vulnerabilities

Advisory ID: VMSA-2022-0031 CVSSv3 Range: 7.5-9.8 Issue Date:2022-12-13 Updated On: 2022-12-13 Initial Advisory CVEs: CVE-2022-31702, CVE-2022-31703 Synopsis: VMware vRealize Network Insight vRNI updates address command injection and directory traversal security vulnerabilities CVE-2022-31702,...