| Package | Affected versions | Patched versions |
|---|---|---|
| aria operations for logs | ≥ 8.10.2, < 8.12.0 | 8.12.0 |
| cloud foundation | ≥ 4.0, ≤ 4.5 |
VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free