description: VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA user's session.
problem types: Missing renewal of session tokens vulnerability
affected:
{
product: vRealize Automation
vendor: VMware
versions:
status: affected, version: prior to 7.4.0
}