ZDI-23-057: VMware vRealize Operations CaSA Improper Access Control Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of VMware vRealize Operations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-057?
The severity of ZDI-23-057 is considered critical due to its potential for sensitive information disclosure.
How do I fix ZDI-23-057?
To fix ZDI-23-057, apply the latest security patch provided by VMware for vRealize Operations.
What versions of VMware vRealize Operations are affected by ZDI-23-057?
ZDI-23-057 affects various versions of VMware vRealize Operations installations.
Can ZDI-23-057 be exploited remotely?
Yes, ZDI-23-057 can be exploited remotely by attackers who have low-privileged access to the target system.
What type of information can be disclosed due to ZDI-23-057?
ZDI-23-057 allows remote attackers to disclose sensitive information stored on the affected VMware vRealize Operations installations.