VMware SD-WAN by VeloCloud update addresses information disclosure vulnerability (CVE-2019-5533)

3. Velocloud information disclosure vulnerability (CVE-2019-5533)

The VeloCloud Orchestrator parameter authorization check mistakenly allows enterprise users to obtain information of Managed Service Provider accounts. VMware has evaluated the severity of this issue to be in the moderate severity range with a maximum CVSSv3 base score of 4.3.