VMware vRealize Operations 8.x < 8.6.4 Multiple Vulnerabilities (VMSA-2022-0022)

The version of VMware vRealize Operations vROps running on the remote host is 8.x prior to 8.6.4. It is, therefore, affected by a multiple vulnerabilities: - A malicious actor with administrative network access can escalate privileges to root. CVE-2022-31672 - A low-privileged malicious actor wit...

CVE-2022-31673

CVE-2022-31673 affects VMware vRealize Operations (versions affected per VMSA-2022-0022). Description: a low-privileged, network-access attacker can create and leak hex dumps, causing information disclosure; successful exploitation can lead to remote code execution. Connected documents corroborat...

CVE-2022-31673

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution...