VMware vRealize Log Insight 8.x < 8.10.2 Mutliple Vulnerabilities (VMSA-2023-0001)

The VMware vRealize Log Insight application running on the remote host is 8.x prior to 8.10.2. It is, therefore, affected by multiple vulnerabilities, including: - An unspecified directory traversal vulnerability. CVE-2022-31706 - An unspecified broken access control vulnerability. CVE-2022-31704...

CVE-2022-31711

creationtimestamp| type| source ---|---|--- 2023-01-25 13:47:26+00:00| seen| https://t.me/truesecator/3983 2023-02-02 01:33:27+00:00| published-proof-of-concept| https://t.me/crackcodes/2486 2023-02-05 18:30:23+00:00| published-proof-of-concept| https://t.me/MrVGunz/683 2023-09-08 21:32:40+00:00|...

CVE-2022-31711

CVE-2022-31711 affects VMware vRealize Log Insight. The provided sources consistently describe an Information Disclosure vulnerability that allows an unauthenticated, remote actor to collect sensitive session and application information. The issue is categorized with CVSS v3.1 metrics (AV:N/AC:L/...