VMSA-2023-0002:VMware vRealize Operations (vROps) update addresses a CSRF bypass vulnerability

Advisory ID: VMSA-2023-0002 CVSSv3 Range: 6.5 Issue Date:2023-01-31 Updated On: 2023-01-31 Initial Advisory CVEs: CVE-2023-20856 Synopsis: VMware vRealize Operations vROps update addresses a CSRF bypass vulnerability CVE-2023-20856 RSS Feed Download PDF Download Text File Share this page on socia...

VMware vRealize Operations 8.x < 8.10 Arbitrary File Read (VMSA-2022-0026)

The version of VMware vRealize Operations vROps running on the remote host is 8.x prior to 8.10. It is, therefore, affected by a vulnerability: - VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary...

VMware vRealize Operations CaSA Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of VMware vRealize Operations. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of CaSA. A crafted administrator command can trigger execution of ...

VMware vRealize Operations CaSA Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of VMware vRealize Operations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...

The vulnerability of the monitoring tool for VMware vRealize Operations, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the monitoring tool for the virtual infrastructure vRealize Operations is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

VMware vRealize Operations 8.x < 8.6 Hot Fix 8, 8.10.x < 8.10.1 Multiple Vulnerabilities (VMSA-2022-0034)

The version of VMware vRealize Operations vROps running on the remote host is 8.x prior to 8.6 Hot Fix 8 or 8.10.x prior to 8.10.1. It is, therefore, affected by a multiple vulnerabilities: - A privilege escalation vulnerability exists. An authenticated, remote attacker with administrative...

CVE-2022-31708

vRealize Operations vROps contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4...

CVE-2022-31708

vRealize Operations vROps contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4...

CVE-2022-31707

vRealize Operations vROps contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2...

CVE-2022-31707

vRealize Operations vROps contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2...

Privilege escalation

vRealize Operations vROps contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2...

Improper access control

vRealize Operations vROps contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4...

CVE-2022-31707

vRealize Operations vROps contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2...

CVE-2022-31708

vRealize Operations vROps contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4...

VMware vRealize Operations 安全漏洞

VMware vRealize Operations is an application from VMware, Inc. A unified, AI-based platform for private, hybrid and multi-cloud environments that delivers IT operations management on autopilot. A security vulnerability exists in VMware vRealize Operations that stems from the inclusion of a...

CVE-2022-31708

vRealize Operations vROps contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4...

VMware vRealize Operations 安全漏洞

VMware vRealize Operations is an application from VMware, Inc. A unified, AI-based platform for private, hybrid and multi-cloud environments that delivers IT operations management on autopilot. A security vulnerability exists in VMware vRealize Operations that stems from an access control...

CVE-2022-31707

vRealize Operations vROps contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2...

PT-2022-6325 · Vmware · Vrealize Operations

Name of the Vulnerable Software and Affected Versions: vRealize Operations versions affected versions not specified Description: The issue is related to a broken access control vulnerability in the VMware vRealize Operations tool, which can lead to information disclosure. This vulnerability may...

PT-2022-6099 · Vmware · Vrealize Operations

Name of the Vulnerable Software and Affected Versions: vRealize Operations vROps affected versions not specified Description: The issue is related to improper privilege management in vRealize Operations, which can lead to a privilege escalation. This allows a remote attacker to potentially elevat...