Non notée
CVE-2021-22025 The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to…
Description
The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can add new nodes to existing vROps cluster.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| VMware vRealize Operations | Versions non publiées |
Références
- www.vmware.com www.vmware.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de VMware vRealize Operations
Les 13 CVE de VMware vRealize Operations →
CVE-2022-31673
VMware vRealize Operations contains an information disclosure vulnerability
8.8
Élevée
CVE-2022-31674
VMware vRealize Operations contains an information disclosure vulnerability
4.3
Moyenne
CVE-2022-31675
VMware vRealize Operations contains an authentication bypass vulnerability
Non notée
CVE-2022-31672
VMware vRealize Operations contains a privilege escalation vulnerability
6.4
Moyenne