description: VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRealize Orchestrator leading to sensitive information disclosure.
problem types: Open redirect vulnerability in vRealize Orchestrator
affected:
{
product: VMware vRealize Orchestrator
vendor: n/a
versions:
status: affected, version: VMware vRealize Orchestrator (8.x prior to 8.6)
}