Not rated
CVE-2021-22023 The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability
Description
The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Operations Manager API may be able to modify other users information leading to an account takeover.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vRealize Operations | Versions not published |
References
- www.vmware.com www.vmware.com
Timeline
- Published
- Last modified
Other CVEs of VMware vRealize Operations
The 13 CVEs of VMware vRealize Operations →
CVE-2022-31673
VMware vRealize Operations contains an information disclosure vulnerability
8.8
High
CVE-2022-31674
VMware vRealize Operations contains an information disclosure vulnerability
4.3
Medium
CVE-2022-31675
VMware vRealize Operations contains an authentication bypass vulnerability
Not rated
CVE-2022-31672
VMware vRealize Operations contains a privilege escalation vulnerability
6.4
Medium