Description
Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges can inject a malicious payload into the login banner and takeover the user account.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware Aria Operations for Networks | VMware Aria Operations for Networks 6.x | — |
Advisories 1
- WID-SEC-2024-0304 VMware Aria Operations for Networks: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 6, 2024