CVE-2021-22036

https://notcve.org/view.php?id=CVE-2021-22036

13 Oct 2021 — VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRealize Orchestrator leading to sensitive information disclosure. VMware vRealize Orchestrator (versiones 8.x anteriores a 8.6) contienen una vulnerabilidad de redireccionamiento abierto debido a un manejo inapropiado de la ruta. Un actor malicioso puede ser capaz de redirigi... • https://www.vmware.com/security/advisories/VMSA-2021-0023.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •