Skip to content
OpenAdvisories
High · 7.8 CVE-2024-38831 EUVD-2024-37706GHSA-7mjq-fcrm-26pg

Local privilege escalation vulnerability (CVE-2024-38831)

Published Nov 26, 2024 · Updated Nov 26, 2024 · Assigned by vmware

Description

VMware Aria Operations contains a local privilege escalation vulnerability.  A malicious actor with local administrative privileges can insert malicious commands into the properties file to escalate privileges to  a root user on the appliance running VMware Aria Operations.

Affected products

VendorProductAffectedFixed
VMware VMware Aria Operations 8.x – < 8.18.2 8.18.2

Advisories 2

References