CVE-2025-41245

VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.

Score

CVSS 3.1 4.9 Medium

Status

Deferred - security@vmware.com

Published

2025-09-29

Last modified

2026-10-18

Weaknesses

CWE-1188

Affected products

• Vmware Aria Operations (Vmware)
• Vmware Cloud Foundation (Vmware)
• Vmware Telco Cloud Infrastructure (Vmware)
• Vmware Telco Cloud Platform (Vmware)

References

• http://support.broadcom.com/group/ecx/support-content-view/-/support-content/Security%20Advisories/VMSA-2025-0015--VMwa…