CVE-2021-22036
Assigner: vmware
Published: 2021-10-13T15:52:00
State: PUBLISHED
affected: product: VMware vRealize Orchestrator
vendor: n/a
versions: status: affected
version: VMware vRealize Orchestrator (8.x prior to 8.6)
descriptions: value: VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRealize Orchestrator leading to sensitive information disclosure.
problemTypes: descriptions: description: Open redirect vulnerability in vRealize Orchestrator
type: text