CVE-2025-22222 — VMware Aria Operations information disclosure vulnerability (CVE-2025-22222)

CVE-2025-22222

VMware Aria Operations information disclosure vulnerability (CVE-2025-22222) PUBLISHED

Description (CNA)

VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privileges may exploit this vulnerability to retrieve credentials for an outbound plugin if a valid service credential ID is known.

Affected (CNA)

Vendor / product	Versions
VMware / VMware Aria Operations	affected 8.x before 8.18.3

CWE

No CWE identifiers supplied.

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25329

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.