Skip to content
OpenAdvisories
Medium WID-SEC-2024-0304 5 CVEs

VMware Aria Operations for Networks: Mehrere Schwachstellen

Published Feb 6, 2024 · Updated Feb 6, 2024 · de-DE

Vendor: VMware Product: Aria Operations for Networks

Summary

Ein privilegierter Angreifer kann mehrere Schwachstellen in VMware Aria Operations for Networks ausnutzen, um seine Privilegien zu erhöhen, Cross-Site Scripting-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.

Product

VMware Aria Operations for Networks (ehemals vRealize Network Insight) ist ein Netzwerk-Analysetool

Vulnerabilities 5

  • High 7.8
    CVE-2024-22237

    Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Op…

  • Medium 6.4
    CVE-2024-22238

    Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may…

  • Medium 5.3
    CVE-2024-22239

    Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Op…

  • Medium 4.9
    CVE-2024-22240

    Aria Operations for Networks contains a local file read vulnerability. A malicious actor with admin privileges may expl…

  • Medium 4.3
    CVE-2024-22241 EPSS 38%

    Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges can…

Revision history

  1. #1

    Initiale Fassung

References