Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9468-5fg2-67xr

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to bypass Adapter authentication.

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to bypass Adapter authentication.

EPSS

Процентиль: 62%
0.00429
Низкий

Связанные уязвимости

CVSS3: 8.6
nvd
почти 6 лет назад

vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to bypass Adapter authentication.

CVSS3: 8.6
fstec
почти 6 лет назад

Уязвимость инструмента мониторинга виртуальной инфраструктуры vRealize Operations, связанная с ошибками аутентификации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 62%
0.00429
Низкий