Detections
Analytics
CVE-2022-31704
critical
Description
The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution.
References
https://thehackernews.com/2023/12/behind-scenes-of-matveevs-ransomware.html
https://www.vmware.com/security/advisories/VMSA-2023-0001.html