VMware Aria Operations Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in VMware Aria Operations. This vulnerability allows a malicious actor with local administrative privileges to escalate their rights to root on the appliance running VMware Aria Operations. The issue has been assigned a CVSSv3 base score of 7.8, indicating a high severity level.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling an attacker with administrative rights to gain root access on the affected appliance.

Remediation

Users can apply the patch available in VMware Aria Operations version 8.18 HF 5 to address this vulnerability. For VMware Cloud Foundation, the patch details can be found in a specific Knowledge Base article. VMware Telco Cloud Platform and VMware Telco Cloud Infrastructure also have the same patch available as VMware Aria Operations.