Description
VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware Aria Operations for Logs
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | VMware Aria Operations for Logs | 8.x – < 8.18.3 | 8.18.3 |
Advisories 2
- WID-SEC-2025-0228 VMware Aria Operations, VMware Aria Operations for Logs und VMware Cloud Foundation:: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 25, 2025
- NCSC-2025-0037 Kwetsbaarheden verholpen in VMware Aria Operations NCSC-NL (Netherlands) · Jan 31, 2025