ZDI-CAN-17963: ZDI-23-114: VMware vRealize Log Insight addClusterCACertificate Deserialization of Untrusted Data Denial-of-Service Vulnerability

Published Feb 9, 2023

Updated

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of VMware vRealize Log Insight. Authentication is not required to exploit this vulnerability.

Affected Software

1 affected component

VMware vRealize Log Insight

Event History

Feb 9, 2023

Advisory Published

06:00 AM

Data Sourced

06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-17963?

ZDI-CAN-17963 is classified as a denial-of-service vulnerability that can severely disrupt VMware vRealize Log Insight services.

How do I fix ZDI-CAN-17963?

To mitigate ZDI-CAN-17963, ensure that you apply the latest security patches provided by VMware for vRealize Log Insight.

Who can exploit ZDI-CAN-17963?

ZDI-CAN-17963 can be exploited by remote attackers without requiring any form of authentication.

What are the potential impacts of ZDI-CAN-17963?

The exploitation of ZDI-CAN-17963 can lead to a complete denial-of-service condition, rendering vRealize Log Insight inoperable.

Which versions of VMware are affected by ZDI-CAN-17963?

ZDI-CAN-17963 affects all installations of VMware vRealize Log Insight without specification of version limits.