| Package | Affected versions | Patched versions |
|---|---|---|
| cloud foundation | ≥ 3.0, ≤ 3.10.2.1≥ 4.0, ≤ 4.2.1 | |
| vrealize operations manager | = 7.5.0≥ 8.0.0, < 8.5.0 | 8.5.0 |
| vrealize suite lifecycle manager | ≥ 8.0, ≤ 8.2 |
The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize Operations Manager API can read any arbitrary file on server leading to information disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free