Information Disclosure Flaw in VMware Aria Operations

CVE-2025-22222

What is CVE-2025-22222?

VMware Aria Operations is susceptible to an information disclosure vulnerability that allows a malicious user with non-administrative access to exploit the flaw. By leveraging this vulnerability, an attacker could potentially retrieve sensitive credentials associated with an outbound plugin if they possess a valid service credential ID. This risk underlines the need for enhanced security measures to protect user credentials and prevent unauthorized access.

References