CVE-2021-22033

published 2021-10-13

CVE-2021-22033: Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.

low 2.7 CVSS 3.1

AV N AC L PR H UI N S U C L I N A N

Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
vmware	cloud_foundation	3.0.0 – 4.3.1	—
vmware	vrealize_operations	>= 7.0.0 < 8.6.0	8.6.0
vmware	vrealize_suite_lifecycle_manager	8.0 – 8.2	—

CWE-918