CVE-2024-38831

Summary

CVE-2024-38831 is a newly identified local privilege escalation vulnerability affecting VMware Aria Operations. This issue allows a malicious actor with local administrative privileges to manipulate the properties file in VMware Aria Operations, granting them elevated access to the root user on the affected appliance. Successful exploitation of this vulnerability could result in unauthorized system access and potential data compromise. VMware urges users to apply the available patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.