Description (CNA)
VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRealize Orchestrator leading to sensitive information disclosure.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / VMware vRealize Orchestrator | affected VMware vRealize Orchestrator (8.x prior to 8.6) |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.