CVE-2022-31711

VMware vRealize Log Insight contains an Information Disclosure Vulnerability

Medium · published January 25, 2023

CVSS v3.1

5.3

EPSS

24%

Percentile

97.8

In the wild

Unconfirmed

What it is

VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sensitive session and application information without authentication.

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.23999 · 97.8th percentile
Published: 2023-01-25T00:00Z

EPSS history

Timeline

25 JAN 00:00Z
VMware vRealize Log Insight contains an Information Disclosure Vulnerability
cvelistv5