VMware Aria Operations for Logs Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in VMware Aria Operations for Logs. This vulnerability allows a malicious actor with non-administrative privileges and network access to the Aria Operations for Logs API to perform certain actions as an admin user.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to perform administrative actions without the necessary rights.

Remediation

Users can upgrade to VMware Aria Operations for Logs version 8.18.3 to address this vulnerability.