Description
VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VMware | VMware Aria Operations | 8.18.x – < 8.18.5 | 8.18.5 |
| VMware | VMware Cloud Foundation | 5.x – < 8.18.5, 4.x – < 8.18.5 | 8.18.5 |
| VMware | VMware Telco Cloud Platform | 5.x – < 8.18.5, 4.x – < 8.18.5 | 8.18.5 |
| VMware | VMware Telco Cloud Infrastructure | 3.x – < 8.18.5, 2.x – < 8.18.5 | 8.18.5 |
Advisories 1
- WID-SEC-2025-2153 VMware Cloud Foundation, vSphere, Aria Operations und Tools: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 23, 2026