Unrated severityNVD Advisory· Published Jan 25, 2023· Updated Apr 2, 2025

CVE-2022-31704

Description

The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VMware/Vrealize Log Insightcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/174606/VMware-vRealize-Log-Insight-Unauthenticated-Remote-Code-Execution.htmlmitre
www.vmware.com/security/advisories/VMSA-2023-0001.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.065
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000