Information Disclosure Vulnerability in VMware vRealize Operations

CVE-2022-31673

Summary

VMware vRealize Operations is affected by an information disclosure vulnerability that could be exploited by low-privileged attackers with network access. Through this vulnerability, an attacker can generate and leak hex dumps, which may lead to the exposure of sensitive information. While the immediate threat involves data leakage, successful exploitation could potentially pave the way for more severe attacks, including remote code execution. It is crucial for organizations using VMware vRealize Operations to be aware of this vulnerability and take the necessary steps to mitigate associated risks.

References