Authentication Bypass Vulnerability in VMware vRealize Operations: Unauthorized Administrative User Creation

Authentication Bypass Vulnerability in VMware vRealize Operations: Unauthorized Administrative User Creation

CVE-2022-31675 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges.

Learn more about our Network Penetration Testing.