ZDI-CAN-18336: ZDI-23-057: VMware vRealize Operations CaSA Improper Access Control Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of VMware vRealize Operations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-18336?
ZDI-CAN-18336 has been rated as a moderate severity vulnerability due to its potential for sensitive information disclosure.
How do I fix ZDI-CAN-18336?
To fix ZDI-CAN-18336, ensure your VMware vRealize Operations is updated to the latest version that includes security patches.
What type of attack does ZDI-CAN-18336 facilitate?
ZDI-CAN-18336 allows remote attackers to disclose sensitive information if they have already executed low-privileged code on the system.
Which software is impacted by ZDI-CAN-18336?
ZDI-CAN-18336 affects installations of VMware vRealize Operations Manager.
What must an attacker do to exploit ZDI-CAN-18336?
An attacker must first gain the ability to execute low-privileged code on the target system to exploit ZDI-CAN-18336.