CVE-2016-2082

Published: Jul 3, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected (8)

Products: Vmware: Vrealize Log Insight

Vmware

1 product

Vrealize Log Insight

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Vmware Vrealize Log Insight	Version 2.0.5
Vmware Vrealize Log Insight	Version 2.0
Vmware Vrealize Log Insight	Version 2.5.1
Vmware Vrealize Log Insight	Version 2.5
Vmware Vrealize Log Insight	Version 3.0.1
Vmware Vrealize Log Insight	Version 3.0
Vmware Vrealize Log Insight	Version 3.3.1
Vmware Vrealize Log Insight	Version 3.3

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (4)

http://www.securitytracker.com/id/1036078

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2016-0008.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securitytracker.com/id/1036078

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2016-0008.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.