critical9.8
CVE-2022-31702
vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API.
Impact
vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API. A malicious actor with network access to the vRNI REST API can execute commands without authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Vrealize Network Insight | Versions 6.2.0, 6.3.0, 6.4.0, 6.5.1, 6.6.0, 6.7.0 |