CVE-2021-22026

The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure.
References
Configurations

Configuration 1

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vrealize_operations_manager:7.5.0:*:*:*:*:*:*:*
cpe:2.3:a:vmware:vrealize_operations_manager:*:*:*:*:*:*:*:*

Information

Published : 2021-08-30 06:15

Updated : 2022-02-01 05:53


NVD link : CVE-2021-22026

Mitre link : CVE-2021-22026

Products Affected
No products.
CWE
CWE-918

Server-Side Request Forgery (SSRF)