Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-22220

VMware Aria Operations for Logs broken access control vulnerability (CVE-2025-22220)

Description

VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware VMware Aria Operations for Logs

Default version status: unaffected

  • 8.x to < 8.18.3affected

References