ZDI-CAN-17962: ZDI-23-115: VMware vRealize Log Insight RemotePakDownloadCommand Directory Traversal Remote Code Execution Vulnerability
Published Feb 9, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware vRealize Log Insight. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
VMware vRealize Log Insight
Event History
Feb 9, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-17962?
The severity of ZDI-CAN-17962 is critical due to its potential for arbitrary code execution by remote attackers.
2
How do I fix ZDI-CAN-17962?
To fix ZDI-CAN-17962, update VMware vRealize Log Insight to the latest version provided by VMware.
3
Who is affected by ZDI-CAN-17962?
Any installations of VMware vRealize Log Insight are affected by ZDI-CAN-17962.
4
Is authentication required to exploit ZDI-CAN-17962?
No, authentication is not required to exploit ZDI-CAN-17962.
5
What are the risks associated with ZDI-CAN-17962?
The risks associated with ZDI-CAN-17962 include unauthorized remote code execution and potential system compromise.