Description
VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware Aria Operations (formerly vRealize Operations) | VMware Aria Operations prior to 8.12 | — |
Advisories 1
- WID-SEC-2023-1204 VMware vRealize Operations: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2023