CVE-2022-31673

VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.

Score

CVSS 3.1 8.8 High

Status

Modified - security@vmware.com

Published

2022-08-10

Last modified

2026-10-08

Weaknesses

CWE-200

Affected products

• Vrealize Operations (Vmware)

References

• https://www.vmware.com/security/advisories/VMSA-2022-0022.html