Not rated
CVE-2021-22027 The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point
Description
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vRealize Operations | Versions not published |
References
- www.vmware.com www.vmware.com
Timeline
- Published
- Last modified
Other CVEs of VMware vRealize Operations
The 13 CVEs of VMware vRealize Operations →
CVE-2022-31673
VMware vRealize Operations contains an information disclosure vulnerability
8.8
High
CVE-2022-31674
VMware vRealize Operations contains an information disclosure vulnerability
4.3
Medium
CVE-2022-31675
VMware vRealize Operations contains an authentication bypass vulnerability
Not rated
CVE-2022-31672
VMware vRealize Operations contains a privilege escalation vulnerability
6.4
Medium