Non notée
CVE-2021-22027 The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point
Description
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| VMware vRealize Operations | Versions non publiées |
Références
- www.vmware.com www.vmware.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de VMware vRealize Operations
Les 13 CVE de VMware vRealize Operations →
CVE-2022-31673
VMware vRealize Operations contains an information disclosure vulnerability
8.8
Élevée
CVE-2022-31674
VMware vRealize Operations contains an information disclosure vulnerability
4.3
Moyenne
CVE-2022-31675
VMware vRealize Operations contains an authentication bypass vulnerability
Non notée
CVE-2022-31672
VMware vRealize Operations contains a privilege escalation vulnerability
6.4
Moyenne