| Package | Affected versions | Patched versions |
|---|---|---|
| cloud foundation | ≥ 3.0, < 5.0 | 5.0 |
| identity manager | = 3.3.3= 3.3.4= 3.3.5= 3.3.6 | |
| vrealize automation | = 7.6≥ 8.0, < 9.0 | 9.0 |
| vrealize suite lifecycle manager | ≥ 8.0, < 9.0 | 9.0 |
| workspace one access | = 20.10.0.0= 20.10.0.1= 21.08.0.0= 21.08.0.1 |
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A malicious actor with remote access may leak the hostname of the target system. Successful exploitation of this issue can lead to targeting victims.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free