CVE-2025-22220
published 2025-01-30CVE-2025-22220: VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria…
medium5.4CVSS 3.1
AVNACLPRLUINSUCLILAN
VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| vmware | aria_operations_for_logs | >= 8.0 < 8.18.3 | 8.18.3 |
| vmware | cloud_foundation | 4.0 – 5.2 | — |
| vmware | vmware_aria_operations_for_logs | >= 8.x < 8.18.3 | 8.18.3 |