Server Side Request Forgery (SSRF) Vulnerability in vRealize Operations Manager API (8.x prior to 8.5) Allows Information Disclosure

CVE-2021-22027 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure.

Learn more about our Cis Benchmark Audit For Server Software.