Published: 26/01/2023 Updated: 11/09/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

This vulnerability allows remote malicious users to execute arbitrary code on affected installations of VMware vRealize Log Insight. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RemotePakDownloadCommand function. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of root.

Vulnerable Product	Search on Vulmon	Subscribe to Product
vmware vrealize log insight

Sign up for Security Advisories Stay up to date on the latest VMware Security advisories and updates ...

POC for RCE using vulnerabilities described in VMSA-2023-0001

VMSA-2023-0001 POC for VMSA-2023-0001 affecting VMware vRealize Log Insight which includes the following CVEs: VMware vRealize Log Insight Directory Traversal Vulnerability (CVE-2022-31706) VMware vRealize Log Insight broken access control Vulnerability (CVE-2022-31704) VMware vRealize Log Insight contains an Information Disclosure Vulnerability (CVE-2022-31711) The default c

VMware Aria Operations for Logs CVE-2023-34051

CVE-2023-34051 CVE-2023-34051 is an authentication bypass that bypasses the patch for VMSA-2023-0001 VMSA-2023-0001 for vRealize Log Insight includes the following CVEs: VMware vRealize Log Insight Directory Traversal Vulnerability (CVE-2022-31706) VMware vRealize Log Insight broken access control Vulnerability (CVE-2022-31704) VMware vRealize Log Insight contains an Informat

CWE-22 https://www.vmware.com/security/advisories/VMSA-2023-0001.html http://packetstormsecurity.com/files/174606/VMware-vRealize-Log-Insight-Unauthenticated-Remote-Code-Execution.html https://nvd.nist.gov https://github.com/horizon3ai/vRealizeLogInsightRCE https://www.zerodayinitiative.com/advisories/ZDI-23-115/https://www.vmware.com/security/advisories/VMSA-2023-0001.html

CVE-2022-31706

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect