Privilege Escalation Vulnerability in VMware Aria Operations and Tools

What changed

A critical vulnerability has been identified in Broadcom's VMware Aria Operations and VMware Tools. This flaw is characterized as a privilege defined with unsafe actions, which can be exploited by malicious local actors.

The vulnerability allows users with non-administrative privileges to escalate their access to root level on virtual machines where VMware Tools is installed and managed by Aria Operations with SDMP enabled.

Who is affected

Various products and users are at risk due to this vulnerability, which could lead to unauthorized access and control over virtual machines.

The following groups are particularly vulnerable:

• Users of Broadcom's VMware Aria Operations
• Users of VMware Tools installed on virtual machines
• Organizations utilizing SDMP features in their VMware environments
• IT administrators managing VMware infrastructures

What to do

Organizations should assess their VMware environments for exposure to this vulnerability and take necessary actions to mitigate potential risks.

It is crucial to monitor for updates from Broadcom and implement patches as soon as they are available.

• Review and restrict access permissions for non-administrative users on VMs.
• Ensure that VMware Tools and Aria Operations are updated to the latest versions.
• Monitor for unusual activities that may indicate exploitation attempts.