What is CVE-2021-22036?

CVE-2021-22036 is a medium-severity vulnerability in Vmware Vrealize_automation, classified under Information Disclosure. CVSS score: 6.5/10. Published 2021-10-13.

How severe is CVE-2021-22036?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Information disclosure in Vmware Vrealize_automation

CVE-2021-22036

VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRea…

Vulnerability class: Information Disclosure

EPSS: 0.009 (55.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Vmware Vrealize_automation
Vmware Vrealize_orchestrator
N/a Vmware Vrealize Orchestrator — versions VMware vRealize Orchestrator (8.x prior to 8.6)

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security@vmware.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-22036?: CVE-2021-22036 is a medium-severity vulnerability in Vmware Vrealize_automation, classified under Information Disclosure. CVSS score: 6.5/10. Published 2021-10-13.
How severe is CVE-2021-22036?: Medium severity. CVSS v3 base score is 6.5 out of 10.