VMware Aria Operations 8.x < 8.18 HF 5 Privilege Escalation (VMSA-2025-0006)

The version of VMware Aria Operations formerly vRealize Operations running on the remote host is 8.x prior to 8.18 HF 5. It is, therefore, affected by a privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the applianc...

CVE-2025-22231

creationtimestamp| type| source ---|---|--- 2025-04-01 14:00:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114263066271453967 2025-04-01 14:00:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114263066271453967 2025-04-01 16:32:33+00:00| seen|...

CVE-2025-22231 VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the appliance running VMware Aria Operations...

CVE-2025-22231 VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the appliance running VMware Aria Operations...

CVE-2025-22231

VMware Aria Operations (8.x, on any host) is affected by a local privilege escalation that allows a user with local admin rights to escalate to root on the appliance. The issue is addressed by patching to 8.18 HF 5 (per VMSA-2025-0006). Connected security advisories indicate a CVSSv3 base score o...

VMSA-2025-0006: VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)

Advisory ID: | VMSA-2025-0006 ---|--- Advisory Severity: | Important CVSSv3 Range: | 7.8 Synopsis: | VMware Aria Operations updates address a local privilege escalation vulnerability CVE-2025-22231 Issue date: | 2025-04-01 Updated on: | 2025-04-01 Initial Advisory CVEs | CVE-2025-22231 1. Impacte...