PT-2022-4219 · Vmware · Vmware Vrealize Operations

·

CVE-2022-31673

·

تاريخ النشر

2022-08-09

·

تاريخ التحديث

2026-10-08

CVSS v3.1

8.8

عالية

المتجهAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions VMware vRealize Operations (affected versions not specified)
Description The issue is related to an information disclosure vulnerability in the monitoring tool for virtual infrastructure. It allows a remote attacker to disclose protected information. A malicious actor with low privileges and network access can create and leak hex dumps, leading to information disclosure, and potentially to remote code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Information Disclosure

Exposure of Resource to Wrong Sphere

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

BDU:2022-05067
CVE-2022-31673

المنتجات المتأثرة

Vmware Vrealize Operations