Support Content Notification - Support Portal

VMSA-2016-0011:vRealize Log Insight update addresses directory traversal vulnerability

Product/Component

Notification Id

23485

Last Updated

10 August 2016

Initial Publication Date

10 August 2016

Status

CLOSED

Severity

MEDIUM

CVSS Base Score

WorkAround

Affected CVE

CVE-2016-5332

VMSA-2016-0011

vRealize Log Insight update addresses directory traversal vulnerability.

VMware Security Advisory

VMware Security Advisory Advisory ID:

VMSA-2016-0011

VMware Security Advisory Severity:

Moderate

VMware Security Advisory Synopsis:

vRealize Log Insight update addresses directory traversal vulnerability.

VMware Security Advisory Issue date:

2016-08-11

VMware Security Advisory Updated on:

2016-08-11 (Initial Advisory)

VMware Security Advisory CVE numbers:

CVE-2016-5332

1. Summary

vRealize Log Insight update addresses directory traversal vulnerability.

2. Relevant Products

vRealize Log Insight

3. Problem Description

vRealize Log Insight contains a vulnerability that may allow for a directory traversal attack. Exploitation of this issue may lead to a partial information disclosure. There are no known workarounds for this issue.

VMware would like to thank Peter Nelson, Security Engineer at WakeMed Health & Hospitals for reporting this issue to us.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2016-5332 to this issue. Column 5 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available.