The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vrealize_log_insight | Vmware | 3.0 (including) | 4.8 (including) |
| Vrealize_log_insight | Vmware | 8.0.0 (including) | 8.10.2 (excluding) |