CVE-2025-22220: VMware Aria Operations for Logs broken access control vulnerability (CVE-2025-22220)
VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative privileges and network access to Aria Operations for Logs API may be able to perform certain operations in the context of an admin user.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-22220?
CVE-2025-22220 has been classified as a high severity privilege escalation vulnerability.
How do I fix CVE-2025-22220?
To mitigate CVE-2025-22220, it is essential to apply the latest security patches provided by VMware for Aria Operations for Logs.
Who is affected by CVE-2025-22220?
CVE-2025-22220 affects users of VMware Aria Operations for Logs with non-administrative privileges.
What kind of attack does CVE-2025-22220 facilitate?
CVE-2025-22220 facilitates privilege escalation attacks, allowing unauthorized users to perform actions as an admin.
When was CVE-2025-22220 disclosed?
CVE-2025-22220 was disclosed on January 30, 2025.