VMware Aria Operations and VMware Tools Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in VMware Aria Operations and VMware Tools. This issue allows a malicious local actor with non-administrative privileges to escalate privileges to root on a virtual machine (VM) where VMware Tools is installed. The vulnerability can be exploited on VMs managed by Aria Operations with Software Development Management Platform (SDMP) enabled.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling a user with non-administrative rights to gain root access on the affected VM.