VMware Aria Operations Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in VMware Aria Operations. A malicious actor with vCenter privileges to access Aria Operations can exploit this vulnerability to gain administrative access within VMware Aria Operations. This vulnerability is also present in VMware Cloud Foundation, VMware Telco Cloud Platform, and VMware Telco Cloud Infrastructure.

Impact

Exploitation of this vulnerability allows for unauthorized administrative access in VMware Aria Operations.

Remediation

To address this vulnerability, users should upgrade to VMware Aria Operations version 8.18.6, VMware Cloud Foundation 9.0.2.0, or VMware Telco Cloud Infrastructure versions 3.x or 2.x. Instructions for downloading these versions are available on the Broadcom Support website.