VMwareVMSA-2021-0023.1VMware vRealize Orchestrator update addresses open redirect vulnerability (CVE-2021-22036)
3. VMware vRealize Orchestrator update addresses open redirect vulnerability (CVE-2021-22036)
VMware vRealize Orchestrator contains an open redirect vulnerability due to improper path handling. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 6.5.
References
customerconnect.vmware.com/downloads/details?downloadGroup=VRA-860&productId=1206&rPId=75320
customerconnect.vmware.com/downloads/details?downloadGroup=VROVA-860&productId=1206&rPId=75321
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22036
docs.vmware.com/en/vRealize-Automation/8.6/rn/vmware-vrealize-automation-86-release-notes/index.html
docs.vmware.com/en/vRealize-Orchestrator/8.6/rn/VMware-vRealize-Orchestrator-86-Release-Notes.html
www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Related
