CVE-2022-31673: Exposure of Sensitive Information to an Unauthorized Actor

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution...

CVE-2022-22983

VMware Workstation 16.x prior to 16.2.4 contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware...

CVE-2022-22983

VMware Workstation 16.x before 16.2.4 is affected by an unprotected storage of credentials vulnerability (CVE-2022-22983). A local attacker with user privileges can disclose passwords stored for remote servers connected via Workstation. Root cause: unprotected credential storage. Impact: potentia...

CVE-2022-31673

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution...

CVE-2022-31673

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution...

CVE-2022-31673

CVE-2022-31673 affects VMware vRealize Operations (versions affected per VMSA-2022-0022). Description: a low-privileged, network-access attacker can create and leak hex dumps, causing information disclosure; successful exploitation can lead to remote code execution. Connected documents corroborat...

CVE-2022-31674

CVE-2022-31674 affects VMware vRealize Operations 8.x before 8.6.4. It is an information-disclosure vulnerability: a low-privileged, network-accessible attacker can access log files that reveal information. The issue is discussed alongside related CVEs (31672–31675) in VMware’s VMSA-2022-0022 adv...

CVE-2022-31674

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure...

CVE-2022-31674

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can access log files that lead to information disclosure...

CVE-2022-31675

VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges...

CVE-2022-31675

VMware vRealize Operations (vROps) versions prior to 8.6.4 are vulnerable to an authentication bypass flaw (CVE-2022-31675 ). An unauthenticated malicious actor with network access can exploit this to create a user account with administrative privileges . This vulnerability is part of a chain (in...

CVE-2022-31672

VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root...

CVE-2022-31672

VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root...

CVE-2022-31672

CVE-2022-31672 affects VMware vRealize Operations (vROps) 8.x prior to 8.6.4. A malicious actor with administrative network access can escalate privileges to root (Privilege Escalation). Additional related CVEs in the same VMSA-2022-0022 advisory include CVE-2022-31673 / 31674 / 31675, indicating...

PT-2022-4202 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically affecting the VMware to Azure functionality. Exploitation of this issue may allow an...

PT-2022-4732 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access control in Azure Site Recovery, specifically in the VMWare to Azure component. This can allow a remote attacker to gain unauthorized...

PT-2022-4701 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restrictions in Azure Site Recovery, specifically in the VMWare to Azure component. Exploitation of this issue may allow a remote...

PT-2022-4199 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient input validation in the Azure Site Recovery VMWare to Azure emergency recovery tool, which can be exploited by a remote attacker to execute...

PT-2022-4209 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access control in Azure Site Recovery, specifically in the VMWare to Azure component. Exploitation of this issue may allow an attacker to...

PT-2022-4557 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the VMWare to Azure component. It allows a remote attacker to potentially elevate...