CVE-2016-2082
published 2016-07-03CVE-2016-2082: Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of…
PriorityP434high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
EPSS
0.63%
46.0th percentile
Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | vmware_vrealize | — | — |
| vmware | vrealize_log_insight | — | — |
| vmware | vrealize_log_insight | — | — |
| vmware | vrealize_log_insight | — | — |
| vmware | vrealize_log_insight | — | — |
| vmware | vrealize_log_insight | — | — |
| vmware | vrealize_log_insight | — | — |
| vmware | vrealize_log_insight | — | — |
| vmware | vrealize_log_insight | — | — |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VMware
VMware vRealize Log Insight addresses important and moderate security issues.
vendor_vmware·2016-06-09·CVSS 6.1
CVE-2016-2081 [MEDIUM] VMware vRealize Log Insight addresses important and moderate security issues.
VMSA-2016-0008: VMware vRealize Log Insight addresses important and moderate security issues.
a. Important stored cross-site scripting issue in VMware vRealize Log Insight VMware vRealize Log Insight contains a vulnerability that may allow for a stored cross-site scripting attack. Exploitation of this issue may lead to the hijack of an authenticated user's session. VMware would like to thank Lukasz Plonka for reporting this issue to us. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2016-2081 to this issue. Column 4 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available. VMware Product Product Version Running on Replace with/ Apply Patch VMware ProductVMware vRealize Log
GHSA
GHSA-w2cj-qmqg-2gwx: Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2
ghsa_unreviewed·2022-05-17
CVE-2016-2082 [HIGH] CWE-352 GHSA-w2cj-qmqg-2gwx: Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2
Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
No detection rules found.
No public exploits indexed.
2016-07-03
Published