Title

VMware vRealize Operations Remote Code Execution Vulnerability (Cat I impact)

Discussion

VMware has released a security advisory addresing a vulnerability affecting versions of vRealize Operations. VMware vRealize Operations is an application which streamlines and automates IT operations management. To exploit this vulnerability, an attacker would entice a user to view a malicious URL via email sent. If successfully exploited, this vulnerability would allow an attacker to gain access to sensitive information.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-72587

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.