VMware vRealize Operations contains an information disclosure vulnerability. A low-privileged malicious actor with network access can create and leak hex dumps, leading to information disclosure. Successful exploitation can lead to a remote code execution.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://www.vmware.com/security/advisories/VMSA-2022-0022.html Patch, Vendor Advisory
- https://www.vmware.com/security/advisories/VMSA-2022-0022.html Patch, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.8 · vmwareNVD modified 2026-10-08 01:16
Affected (CPE criteria) 1
cpe:2.3:a:vmware:vrealize_operations:*:*:*:*:*:*:*:*
References 2
- https://www.vmware.com/security/advisories/VMSA-2022-0022.html Patch, Vendor Advisory
- https://www.vmware.com/security/advisories/VMSA-2022-0022.html Patch, Vendor Advisory