Description
VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRealize Orchestrator leading to sensitive information disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware vRealize Orchestrator | VMware vRealize Orchestrator (8.x prior to 8.6) | — |