Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in VMware Cloud Foundation ausnutzen, um Informationen offenzulegen.
Product
VMware Cloud Foundation ist eine Hybrid Cloud-Plattform für VM-Management und Container-Orchestrierung.
Vulnerabilities 1
-
Medium 4.3
VMSA-2025-0001: VMware Aria automation update addresses a server side request forgery vulnerability (CVE-2025-22215)
VMware Aria Automation contains a server-side request forgery (SSRF) vulnerability. A malicious actor with "Organization Member" access to Aria Automation may exploit this vulnerability enumerate internal services running on the host/network.
Revision history
-
#1
Initiale Fassung
References
-
VMware Security Advisory vom 2025-01-07
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25312
-
GitHub Advisory Database vom 2025-01-07
https://github.com/advisories/GHSA-wgc3-34qh-3h44