VMware Cloud Foundation, vSphere, Aria Operations und Tools: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in VMware Cloud Foundation, VMware vSphere, VMware Aria Operations und VMware Tools ausnutzen, um erweiterte Berechtigungen – sogar Administratorrechte – zu erlangen und vertrauliche Informationen offenzulegen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2025-21533 linked CVEs
Open advisory with all CVEs
More on vSphere
Other advisories
- LowCVE-2025-7039NetApp ActiveIQ Unified Manager für VMware vSphere (Glib, SQLite): Mehrere Schwachstellen
- HighCVE-2026-41012Cloud Foundry Bosh-vsphere-cpi-release: unzureichende Zertifikatvalidierung
- CriticalCVE-2025-41245VMware Cloud Foundation, vSphere, Aria Operations und Tools: Mehrere Schwachstellen
- MediumCVE-2023-43029IBM Storage Virtualize vSphere Remote Plug-in: Offenlegung vertraulicher Informationen
- MediumCVE-2023-43029IBM Storage Virtualize vSphere Remote Plug-in: Offenlegung vertraulicher Informationen
- Not ratedosv:CVE-2022-45157Exposure of vSphere's CPI and CSI credentials in Rancher
- CriticalCVE-2022-45157Exposure of vSphere's CPI and CSI credentials in Rancher in github.com/rancher/rancher
- CriticalCVE-2022-45157Exposure of vSphere's CPI and CSI credentials in Rancher
Other news entries
- Protecting the vSphere Kubernetes Control Plane: Architecting Zero Trust for Supervisor and VKS with vDefendNewsVMware Security Advisories
- NetApp ActiveIQ Unified Manager für VMware vSphere (Glib, SQLite): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Broadcom patches vulnerabilities all over VMwareNewsCSO Online
- Fixes Available for Five VMware VulnerabilitiesVulnerabilitySANS NewsBites
- VMware Cloud Foundation Operations: Mehrere Schwachstellen ermöglichen Cross-Site ScriptingVulnerabilityBSI CERT-Bund
- VMware Cloud Foundation Operations: Mehrere Schwachstellen ermöglichen Cross-Site ScriptingVulnerabilityBSI CERT-Bund
- Broadcom: Stored XSS Vulnerabilities in VMware Cloud Foundation OperationsVulnerabilitySANS NewsBites
- HyperArmor: Broadcoms Antwort auf KI-Angriffe auf VMware ESXNewsheise Security
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2153
ID