PT-2025-4394 · Vmware · Vmware Aria Operations For Logs

Maxime Escourbiac + 2 · Published 2025-01-30 · Updated 2025-05-14 · CVE-2025-22218

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Aria Operations for Logs (affected versions not specified)

Description The issue concerns an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware Aria Operations for Logs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Generation of Error Message Containing Sensitive Information

Information Disclosure

Weakness Enumeration

CWE-209

CWE-200

Related Identifiers

BDU:2025-05510

CVE-2025-22218

Affected Products

Vmware Aria Operations For Logs

References · 21

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25329 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-22218 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05510 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22218 · Security Note
• https://t.me/cvedetector/16800 · Telegram Post
• https://twitter.com/CVEnew/status/1884974889271980310 · Twitter Post
• https://twitter.com/syberintel/status/1885244996929941517 · Twitter Post
• https://feedly.com/cve/CVE-2025-22218 · Note
• https://twitter.com/dailycve/status/1922720232419852674 · Twitter Post
• https://techdocs.broadcom.com/us/en/vmware-cis/aria/aria-operations-for-logs/8-18/vmware-aria-operations-for-logs-8183-release-notes.html · Note
• https://twitter.com/threatlight/status/1888317085220004292 · Twitter Post
• https://twitter.com/TrendingNewsBot/status/1885297492662579352 · Twitter Post
• https://twitter.com/CveFindCom/status/1884972855873466578 · Twitter Post
• https://support.broadcom.com/group/ecx/productfiles?subFamily=VMware%20Aria%20Operations%20for%20Logs&displayGroup=VMware%20Aria%20Operations%20for%20Logs&release=8.18.3&os=&servicePk=527517&language=EN · Note
• https://twitter.com/CCBalert/status/1885373822381031920 · Twitter Post