CVE-2022-31673
HighCVSS 8.8Exploitation Probability (EPSS)
High risk77th percentile - higher than 77% of all known CVEs
Summary
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.
Risk Assessment
The risk includes disclosure of sensitive information and potential remote code execution, which could lead to full system compromise. Even low-privileged attackers can exploit this vulnerability.
Recommendation
It is recommended to immediately update VMware vRealize Operations to a version that includes the fix. Also, restrict network access to the system to trusted users only.
Other vulnerabilities in VMware vRealize Operations
Original NVD description (English source)
VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS