high8.5
CVE-2025-22218
VMware Aria Operations for Logs contains an information disclosure vulnerability.
Impact
VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin permissions may be able to read the credentials of a VMware product integrated with VMware Aria Operations for Logs
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Aria Operations For Logs | from 8.0 before 8.18.3 |
| Vmware | Cloud Foundation | from 4.0 through 5.2 |