ZDI-23-115: VMware vRealize Log Insight RemotePakDownloadCommand Directory Traversal Remote Code Execution Vulnerability
Published Feb 9, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware vRealize Log Insight. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
VMware vRealize Log Insight
Event History
Feb 9, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-115?
The severity of ZDI-23-115 is critical due to the potential for remote code execution.
2
How do I fix ZDI-23-115?
To fix ZDI-23-115, update VMware vRealize Log Insight to the latest version provided by VMware.
3
Who is affected by ZDI-23-115?
ZDI-23-115 affects all installations of VMware vRealize Log Insight.
4
Is authentication required to exploit ZDI-23-115?
No, authentication is not required to exploit ZDI-23-115.
5
What type of vulnerability is ZDI-23-115?
ZDI-23-115 is classified as a remote code execution vulnerability.