CVE-2018-6980

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which they are not allowed to perform.
References
Link Resource
https://www.vmware.com/security/advisories/VMSA-2018-0028.html Patch Vendor Advisory
http://www.securityfocus.com/bid/105925 Third Party Advisory VDB Entry
Configurations

Configuration 1

cpe:2.3:a:vmware:vrealize_log_insight:*:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vrealize_log_insight:*:*:*:*:*:*:*:*

Information

Published : 2018-11-13 10:29

Updated : 2019-10-03 01:33


NVD link : CVE-2018-6980

Mitre link : CVE-2018-6980

Products Affected
No products.
CWE