CVE-2025-22218

VMware Aria Operations for Logs contains an information disclosure vulnerability.A malicious actor with View Only Admin permissions may be able to read the credentialsof a VMware product integrated with VMware Aria Operations for Logs
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.5 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
vmwareCNA
8.5 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
VendorProductVersion
vmwarearia_operations_for_logs
8.0 ≤
𝑥
< 8.18.3
vmwarecloud_foundation
4.0 ≤
𝑥
≤ 5.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25329