CVE-2020-3945

Name of the Vulnerable Software and Affected Versions vRealize Operations for Horizon Adapter versions 6.6.x prior to 6.6.1 vRealize Operations for Horizon Adapter versions 6.7.x prior to 6.7.1

Description The issue is related to an information disclosure vulnerability due to incorrect pairing implementation between the vRealize Operations for Horizon Adapter and Horizon View. An unauthenticated remote attacker with network access to vRealize Operations, where the Horizon Adapter is running, may obtain sensitive information.

Recommendations For versions 6.6.x prior to 6.6.1, update to version 6.6.1 or later. For versions 6.7.x prior to 6.7.1, update to version 6.7.1 or later.