CVE-2021-22024

Publication date

2021-08-30 17:53:37

Family

vmware

State

PUBLISHED

Description

The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can read any log file resulting in sensitive information disclosure.