PT-2022-4230 · Vmware · Vmware Vrealize Operations

Mr_Me + 1 · Published 2022-08-09 · Updated 2023-08-08 · CVE-2022-31675

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions VMware vRealize Operations (affected versions not specified)

Description The issue is related to an authentication bypass vulnerability in VMware vRealize Operations. This vulnerability can be exploited by an unauthenticated malicious actor with network access, allowing them to create a user with administrative privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2022-05078

CVE-2022-31675

Affected Products

Vmware Vrealize Operations

References · 7

• https://vmware.com/security/advisories/VMSA-2022-0022.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05078 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31675 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31675 · Security Note
• https://t.me/freedomf0x/18135 · Telegram Post
• https://t.me/cvenotify/34509 · Telegram Post
• https://t.me/poxek/2470 · Telegram Post