CVE-2025-22220

VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - security@vmware.com

Published

2025-01-30

Last modified

2026-02-26

Weaknesses

CWE-269

Affected products

• Aria Operations For Logs (Vmware)
• Cloud Foundation (Vmware)
• Vmware Aria Operations For Logs (Vmware)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25329