CVE-2018-6980

CVE-2018-6980: vulnerability in VMware vRealize Log Insight

Published · Updated

Follow this CVE+ Monitor vRealize Log Insight

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%
VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which they are not allowed to perform.
Affected products
VMware · VMware vRealize Log Insight