Broken Access Control in VMware vRealize Operations

CVE-2022-31708

What is CVE-2022-31708?

VMware vRealize Operations is affected by a broken access control vulnerability that may allow an attacker to gain unauthorized access to sensitive information or functionality. This flaw arises when the application improperly verifies user permissions, thereby enabling malicious users to exploit unauthorized access paths. It is crucial for organizations using vRealize Operations to apply the latest security updates to mitigate potential risks associated with this vulnerability.

References