VMware vRealize Log Insight 8.x < 8.10.2 Mutliple Vulnerabilities (VMSA-2023-0001)

The VMware vRealize Log Insight application running on the remote host is 8.x prior to 8.10.2. It is, therefore, affected by multiple vulnerabilities, including: - An unspecified directory traversal vulnerability. CVE-2022-31706 - An unspecified broken access control vulnerability. CVE-2022-31704...

CVE-2022-31711

creationtimestamp| type| source ---|---|--- 2023-01-25 13:47:26+00:00| seen| https://t.me/truesecator/3983 2023-02-02 01:33:27+00:00| published-proof-of-concept| https://t.me/crackcodes/2486 2023-02-05 18:30:23+00:00| published-proof-of-concept| https://t.me/MrVGunz/683 2023-09-08 21:32:40+00:00|...

CVE-2022-31711

VMware vRealize Log Insight versions prior to 8.10.2 are affected by an Information Disclosure vulnerability (CVE-2022-31711 ). This flaw allows an unauthenticated remote attacker to collect sensitive session and application information. While the vulnerability is categorized as information discl...