CVE-2022-31711

CVE-2022-31711 is an Information Disclosure vulnerability affecting VMware vRealize Log Insight that allows an unauthenticated attacker to remotely collect sensitive session and application information. Rated as MEDIUM severity (CVSS 5.3), this vulnerability has a low attack complexity and can be exploited over the network without user interaction, potentially leading to unauthorized data access. While not listed on CISA's KEV catalog, public exploit modules, including a Metasploit RCE exploit, are available, and it has garnered significant community and media attention with numerous articles discussing its exploitation. Its high EPSS and FAUCET Risk Score indicate a substantial likelihood of exploitation.