Description
VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | VMware Aria Operations for Logs | 8.x – < 8.18.3 | 8.18.3 |
Advisories 2
- WID-SEC-2025-0228 VMware Aria Operations, VMware Aria Operations for Logs und VMware Cloud Foundation:: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 25, 2025
- NCSC-2025-0037 Kwetsbaarheden verholpen in VMware Aria Operations NCSC-NL (Netherlands) · Jan 31, 2025