CVE-2025-22231: VMware Aria Operations updates address a local privilege escalation vulnerability (CVE-2025-22231)
Published Apr 1, 2025
·Updated
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the appliance running VMware Aria Operations.
Affected Software
1 affected component
VMware Aria Operations
Event History
Apr 1, 2025
CVE Published
via MITRE·12:59 PM
Data Sourced
via MITRE·12:59 PM
DescriptionSeverity
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-22231?
CVE-2025-22231 is classified as a local privilege escalation vulnerability.
2
How do I fix CVE-2025-22231?
To fix CVE-2025-22231, apply the latest security patches provided by VMware for Aria Operations.
3
Who is affected by CVE-2025-22231?
CVE-2025-22231 affects users with local administrative privileges on appliances running VMware Aria Operations.
4
What type of vulnerability is CVE-2025-22231?
CVE-2025-22231 is a local privilege escalation vulnerability that allows malicious actors to escalate privileges.
5
Can I exploit CVE-2025-22231 remotely?
No, CVE-2025-22231 requires local access with administrative privileges to exploit.