Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2025-41245

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware VMware Aria Operations

Default version status: unaffected

  • 8.18.x to < 8.18.5affected

VMware VMware Cloud Foundation

Default version status: unaffected

  • 5.x to < 8.18.5affected
  • 4.x to < 8.18.5affected

VMware VMware Telco Cloud Platform

Default version status: unaffected

  • 5.x to < 8.18.5affected
  • 4.x to < 8.18.5affected

VMware VMware Telco Cloud Infrastructure

Default version status: unaffected

  • 3.x to < 8.18.5affected
  • 2.x to < 8.18.5affected

References