| Package | Affected versions | Patched versions |
|---|---|---|
| identity manager | ≥ 2.0, < 2.7.1 | 2.7.1 |
| vrealize automation | ≥ 7.0, < 7.2.0 | 7.2.0 |
VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free