Description
VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected products
- VMware / VMware Aria Operations8.18.x – 8.18.5
- VMware / VMware Cloud Foundation4.x – 8.18.5
- VMware / VMware Cloud Foundation5.x – 8.18.5
- VMware / VMware Telco Cloud Infrastructure3.x – 8.18.5
- VMware / VMware Telco Cloud Infrastructure2.x – 8.18.5
- VMware / VMware Telco Cloud Platform5.x – 8.18.5
- VMware / VMware Telco Cloud Platform4.x – 8.18.5