VMware Aria Operations Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in VMware Aria Operations. This issue arises from a malicious user with non-administrative privileges being able to retrieve credentials for an outbound plugin, provided they know a valid service credential ID. VMware has assigned a severity level of 'Important' to this vulnerability, with a CVSSv3 base score of 7.7.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive credentials for an outbound plugin, potentially allowing for further exploitation or unauthorized actions within the affected system.

Remediation

Users can upgrade to VMware Aria Operations version 8.18.3 to address this vulnerability. Instructions for downloading this version are available on the Broadcom Support website.