CVE-2022-31675: High severity vmware vrealize operations vulnerability
VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-31675?
CVE-2022-31675 is a vulnerability in VMware vRealize Operations that allows an unauthenticated malicious actor to bypass authentication and create a user with administrative privileges.
What is the severity of CVE-2022-31675?
CVE-2022-31675 has a severity rating of 7.5, which is considered high.
How does CVE-2022-31675 affect VMware vRealize Operations?
CVE-2022-31675 affects VMware vRealize Operations by allowing an unauthenticated attacker with network access to create a user with administrative privileges, bypassing authentication.
How can I fix CVE-2022-31675?
To fix CVE-2022-31675, it is recommended to upgrade VMware vRealize Operations to a version higher than 8.6.4, as specified in the advisory by VMware.
Where can I find more information about CVE-2022-31675?
You can find more information about CVE-2022-31675 in the advisory VMSA-2022-0022 published by VMware.