CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22024

The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can read any log file resulting in sensitive information disclosure.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 50.5%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2021-22024

Vmware » Cloud Foundation » Version: 3.0

cpe:2.3:a:vmware:cloud_foundation:3.0
Vmware » Cloud Foundation » Version: 3.0.1

cpe:2.3:a:vmware:cloud_foundation:3.0.1
Vmware » Cloud Foundation » Version: 3.0.1.1

cpe:2.3:a:vmware:cloud_foundation:3.0.1.1
Vmware » Cloud Foundation » Version: 3.10

cpe:2.3:a:vmware:cloud_foundation:3.10
Vmware » Cloud Foundation » Version: 3.10.1

cpe:2.3:a:vmware:cloud_foundation:3.10.1
Vmware » Cloud Foundation » Version: 3.10.1.1

cpe:2.3:a:vmware:cloud_foundation:3.10.1.1
Vmware » Cloud Foundation » Version: 3.10.1.2

cpe:2.3:a:vmware:cloud_foundation:3.10.1.2
Vmware » Cloud Foundation » Version: 3.10.2.1

cpe:2.3:a:vmware:cloud_foundation:3.10.2.1
Vmware » Cloud Foundation » Version: 3.5

cpe:2.3:a:vmware:cloud_foundation:3.5
Vmware » Cloud Foundation » Version: 3.5.1

cpe:2.3:a:vmware:cloud_foundation:3.5.1
Vmware » Cloud Foundation » Version: 3.7

cpe:2.3:a:vmware:cloud_foundation:3.7
Vmware » Cloud Foundation » Version: 3.7.1

cpe:2.3:a:vmware:cloud_foundation:3.7.1
Vmware » Cloud Foundation » Version: 3.7.2

cpe:2.3:a:vmware:cloud_foundation:3.7.2
Vmware » Cloud Foundation » Version: 3.8

cpe:2.3:a:vmware:cloud_foundation:3.8
Vmware » Cloud Foundation » Version: 3.8.1

cpe:2.3:a:vmware:cloud_foundation:3.8.1
Vmware » Cloud Foundation » Version: 3.9

cpe:2.3:a:vmware:cloud_foundation:3.9
Vmware » Cloud Foundation » Version: 3.9.1

cpe:2.3:a:vmware:cloud_foundation:3.9.1
Vmware » Cloud Foundation » Version: 4.0

cpe:2.3:a:vmware:cloud_foundation:4.0
Vmware » Cloud Foundation » Version: 4.0.1

cpe:2.3:a:vmware:cloud_foundation:4.0.1
Vmware » Cloud Foundation » Version: 4.1

cpe:2.3:a:vmware:cloud_foundation:4.1
Vmware » Cloud Foundation » Version: 4.1.0.1

cpe:2.3:a:vmware:cloud_foundation:4.1.0.1
Vmware » Cloud Foundation » Version: 4.2

cpe:2.3:a:vmware:cloud_foundation:4.2
Vmware » Cloud Foundation » Version: 4.2.1

cpe:2.3:a:vmware:cloud_foundation:4.2.1
Vmware » Vrealize Operations Manager » Version: 7.5.0

cpe:2.3:a:vmware:vrealize_operations_manager:7.5.0
Vmware » Vrealize Operations Manager » Version: 8.0.0

cpe:2.3:a:vmware:vrealize_operations_manager:8.0.0
Vmware » Vrealize Operations Manager » Version: 8.0.1

cpe:2.3:a:vmware:vrealize_operations_manager:8.0.1
Vmware » Vrealize Operations Manager » Version: 8.1.0

cpe:2.3:a:vmware:vrealize_operations_manager:8.1.0
Vmware » Vrealize Operations Manager » Version: 8.1.1

cpe:2.3:a:vmware:vrealize_operations_manager:8.1.1
Vmware » Vrealize Operations Manager » Version: 8.2.0

cpe:2.3:a:vmware:vrealize_operations_manager:8.2.0
Vmware » Vrealize Operations Manager » Version: 8.3.0

cpe:2.3:a:vmware:vrealize_operations_manager:8.3.0
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.0

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.0.1

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0.1
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.1

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.1
Vmware » Vrealize Suite Lifecycle Manager » Version: 8.2

cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-22024

Products

Pricing

Contact Us