CVE-2022-31706 PoC — VMware vRealize Log Insight 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31706.yaml

Associated Vulnerability

Title:VMware vRealize Log Insight 路径遍历漏洞 (CVE-2022-31706)
Description:VMware vRealize Log Insight是美国威睿（VMware）公司的一套集中式日志管理解决方案。该产品支持日志整理和日志分析等功能。 VMware vRealize Log Insight 存在安全漏洞。未经身份验证的攻击者可以将文件注入受影响设备的操作系统，从而导致远程代码执行。

Description

he vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

File Snapshot


 id: CVE-2022-31706

info:
  name: VMware vRealize Log Insight - Path Traversal
  author: ritikchaddh

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!