Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pvc9-qr25-w7jc

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which they are not allowed to perform.

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which they are not allowed to perform.

EPSS

Процентиль: 53%
0.003
Низкий

7.2 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.2
nvd
около 7 лет назад

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which they are not allowed to perform.

CVSS3: 7.2
fstec
около 7 лет назад

Уязвимость средства управления журналами vRealize Log Insight, связанная с ошибками авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 53%
0.003
Низкий

7.2 High

CVSS3

Дефекты

CWE-863