578
VMScore

CVE-2018-6980

Published: 13/11/2018 Updated: 03/10/2019
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

VMware vRealize Log Insight (4.7.x prior to 4.7.1 and 4.6.x prior to 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which they are not allowed to perform.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

vmware vrealize log insight