| Package | Affected versions | Patched versions |
|---|---|---|
| vrealize operations | = 6.0.0= 6.1.0= 6.2.0a= 6.2.1= 6.3.0 |
The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free