CyberRota Analysis
AI-GeneratedAuthenticated Ops Manager users with a read-only project role can exploit insufficient ownership validation to access daily host monitoring records from other projects, potentially exposing sensitive deployment metadata such as host and configuration details. Although the severity is rated low, organizations using Ops Manager should prioritize addressing this vulnerability to prevent unauthorized data exposure. This is particularly relevant for teams managing sensitive infrastructure or configurations across multiple projects.
Original NVD Description
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.