Add in VMWare VRealize RCE chain (CVE-2022-31706, CVE-2022-31704, CVE-2022-31711)

[gwillcox-r7]

Summary

By combining a directory traversal, broken access control, and information disclosure vulnerability, it is possible to gain unauthenticated RCE on a vulnerable VMware vRealize Log Insight device.

Basic example

Technical writeup is at https://www.horizon3.ai/vmware-vrealize-log-insight-vmsa-2023-0001-technical-deep-dive

POC is at https://github.com/horizon3ai/vRealizeLogInsightRCE

Motivation

VMWare products are heavily targeted in the wild and we don't often get as many of them added into Metasploit.

[EgeBalci]

Better late than never right :)

#18273

[adfoster-r7]

This was landed - thanks!

#18273