| Package | Affected versions | Patched versions |
|---|---|---|
| ops manager | ≥ 7.0.0, < 7.0.23≥ 8.0.0, < 8.0.27 | 7.0.238.0.27 |
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free