CVE-2018-6980 – VMware Security Advisory 2018-0028

https://notcve.org/view.php?id=CVE-2018-6980

13 Nov 2018 — VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registration method. Successful exploitation of this issue may allow Admin users with view only permission to perform certain administrative functions which they are not allowed to perform. VMware vRealize Log Insight (versiones 4.7.x anteriores a la 4.7.1 y versiones 4.6.x anteriores a la 4.6.2) contiene una vulnerabilidad debido a la autorización incorrecta en el métod... • http://www.securityfocus.com/bid/105925 • CWE-863: Incorrect Authorization •