Security Advisory

CVE-2021-22024

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-30 17:53:37
Last updated 2024-08-03 18:30:23
Assigner vmware
State PUBLISHED

Description

The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can read any log file resulting in sensitive information disclosure.