The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.
| Software | From | Fixed in |
|---|---|---|
| vmware / vrealize_log_insight | 3.0 | 4.8.x |
| vmware / vrealize_log_insight | 8.0.0 | 8.10.2 |