VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Aria_operations_for_logs | Vmware | 8.0 (including) | 8.18.3 (excluding) |
| Cloud_foundation | Vmware | 4.0 (including) | 5.2 (including) |