← Back

CVE-2025-22218

nvd nist
Published: Jan 30, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.7
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Exploitability: 3.1 / Impact: 4.0
Source: NVD

Description

VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware Aria Operations for Logs

Affected (2)

Vmware
2 products
Aria Operations For Logs
Cloud Foundation
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Aria Operations For Logs
From 8.0 to 8.18.3
Cloud Foundation
From 4.0 to 5.2

Related CWEs

CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.