Description
VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials for an outbound plugin if a valid service credential ID is known.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | VMware Aria Operations | 8.x – < 8.18.3 | 8.18.3 |
Advisories 2
- WID-SEC-2025-0228 VMware Aria Operations, VMware Aria Operations for Logs und VMware Cloud Foundation:: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 25, 2025
- NCSC-2025-0037 Kwetsbaarheden verholpen in VMware Aria Operations NCSC-NL (Netherlands) · Jan 31, 2025