CVE-2025-41245: VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-41245?
CVE-2025-41245 has been rated as a high severity vulnerability due to the potential for information disclosure.
How do I fix CVE-2025-41245?
To fix CVE-2025-41245, ensure that you apply the recommended updates or patches provided by VMware for Aria Operations.
Who is affected by CVE-2025-41245?
Users of VMware Aria Operations with non-administrative privileges are affected by CVE-2025-41245.
What type of vulnerability is CVE-2025-41245?
CVE-2025-41245 is classified as an information disclosure vulnerability.
How can CVE-2025-41245 be exploited?
A malicious actor with non-administrative privileges can exploit CVE-2025-41245 to disclose credentials of other users.