VMware Releases Patches for Critical vRealize Log Insight Software Vulnerabilities

VMware on Tuesday released software to remediate four security vulnerabilities affecting vRealize Log Insight (aka Aria Operations for Logs) that could expose users to remote code execution attacks.
Two of the flaws are critical, carrying a severity rating of 9.8 out of a maximum of 10, the virtualization services provider noted in its first security bulletin for 2023.
Tracked as CVE-2022-31706

aria attacks code code execution critical cve cve-2022-31706 flaws insight log logs operations patches releases remote code remote code execution security security bulletin services severity software software vulnerabilities tuesday virtualization vmware vrealize vrealize log insight vulnerabilities