CVE-2022-31706: Path Traversal
The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vRealize Log Insight vulnerability?
The vulnerability ID for this vRealize Log Insight vulnerability is CVE-2022-31706.
What is the severity of CVE-2022-31706?
The severity of CVE-2022-31706 is critical, with a severity value of 9.8.
What is the description of CVE-2022-31706?
CVE-2022-31706 is a Directory Traversal Vulnerability in vRealize Log Insight that allows an unauthenticated, malicious actor to inject files into the operating system, potentially leading to remote code execution.
What software is affected by CVE-2022-31706?
CVE-2022-31706 affects VMware vRealize Log Insight versions between 3.0 and 4.8, as well as versions between 8.0.0 and 8.10.2.
How can the Directory Traversal Vulnerability in vRealize Log Insight be fixed?
To fix the Directory Traversal Vulnerability in vRealize Log Insight, it is recommended to apply the necessary security patches and updates provided by VMware.