Login Request a demo
Medium severity · published Aug 31, 2016
CVE-2016-5332
Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files via unspecified vectors
5.3
CVSS
3%
EPSS
No
On KEV
Description
Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VL
Vrealize Log Insight · Vmware
2.0; 2.0.5; 2.5; 3.0; 3.3 · source: NVD
Affected product
VL
Vrealize Log Insight
Vmware
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-5332
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-5332
www.securityfocus.com
http://www.securityfocus.com/bid/92448
www.securitytracker.com
http://www.securitytracker.com/id/1036619
Patch
http://www.vmware.com/security/advisories/VMSA-2016-0011.html
More from Vrealize Log Insight
9.8
CVE-2022-31706
The vRealize Log Insight contains a Directory Traversal Vulnerability
9.8
CVE-2022-31704
The vRealize Log Insight contains a broken access control vulnerability
8.8
CVE-2016-2082
Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims…
7.5
CVE-2022-31710
vRealize Log Insight contains a deserialization vulnerability
7.5
CVE-2022-31703
The vRealize Log Insight contains a Directory Traversal Vulnerability