PT-2022-6099 · Vmware · Vrealize Operations

Bing Liu + 2 · Published 2022-12-15 · Updated 2023-01-18 · CVE-2022-31707

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions vRealize Operations (vROps) (affected versions not specified)

Description The issue is related to improper privilege management in vRealize Operations, which can lead to a privilege escalation. This allows a remote attacker to potentially elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2023-00037

CVE-2022-31707

ZDI-23-054

Affected Products

Vrealize Operations

References · 5

• https://bdu.fstec.ru/vul/2023-00037 · Security Note
• https://vmware.com/security/advisories/VMSA-2022-0034.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31707 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-054 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-31707 · Security Note