writeups.xyz / Catching bugs in VMware: Carbon Black Cloud Workload Appliance and vRealize Operations Manager

Submitter : c2a

Date: 25 February 2022

Bounty : undisclosed

Vulnerabilities :

• Authentication Bypass
• RCE
• SSRF
• Path Traversal

Programs :

• VMware

Authors :

• Egor Dimitrenko (@Elk0kc)

Link :
https://swarm.ptsecurity.com/catching-bugs-in-vmware-carbon-black-cloud-workload-appliance-and-vrealize-operations-manager/