Improper Authorization in VMware vRealize Log Insight by VMware
CVE-2018-6980
7.2HIGH
What is CVE-2018-6980?
VMware vRealize Log Insight versions 4.7.x prior to 4.7.1 and 4.6.x prior to 4.6.2 exhibit a vulnerability where improper authorization in the user registration method can be exploited. This flaw allows users with view-only permissions to carry out administrative actions that should be restricted, potentially compromising the system's integrity and security.
Affected Version(s)
VMware vRealize Log Insight VVMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2)