CVE-2022-31706 in vRealize Log Insight

Sumário

de MITRE • 26/01/2023

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 25/05/2022
• Divulgação: 26/01/2023
• Moderação: aceite
• Entrada: VDB-219321
• CPE: pronto
• CWE: CWE-22 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.87077
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-31706
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-31706
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-31706/