VMware Aria Operations for Logs Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in VMware Aria Operations for Logs. This issue arises from a flaw that enables a malicious actor with View Only Admin permissions to potentially access the credentials of a VMware product integrated with Aria Operations for Logs. VMware has assigned this vulnerability a severity rating of Important, with a maximum CVSSv3 base score of 8.5.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive credentials, which may be misused to compromise integrated VMware products.

Remediation

Users can upgrade to VMware Aria Operations for Logs version 8.18.3 to address this vulnerability.