VMware Patched critical flaw in Aria Operations

VMware revealed several critical vulnerabilities in its Aria Operations product, with the most severe allowing attackers to gain root user privileges on affected systems.

The advisory, VMSA-2024-0022, released on November 26, 2024, addresses five distinct vulnerabilities:

• Event
• National

Workshop on “DDoS use cases & solutions for government & BFSI” held at BCS

By infosecbulletin / Sunday , December 1 2024

A workshop on "DDoS use cases & solutions for government & BFSI" held at Bangladesh computer society premises on Saturday...

Read More

• Alert
• Cyber Attack
• Data Breach
• Hot Topic
• International
• Vulnerabilities

Uganda confirms hack of central bank accounts, Refutes $17 Million Claim

By infosecbulletin / Saturday , November 30 2024

Uganda’s finance ministry confirmed media reports that hackers breached the central bank’s systems and stole money, but refuted the claims...

Read More

• Alert
• Vulnerabilities

CVE-2024-11667
Hackers actively exploiting Zyxel firewall to deploy Ransomware

By infosecbulletin / Friday , November 29 2024

CERT Germany and Zyxel have alerted about a serious vulnerability in Zyxel firewalls, identified as CVE-2024-11667. This flaw is being...

Read More

• Daily Security Update

Daily Security Update Dated: 29.11.2024

By infosecbulletin / Friday , November 29 2024

Every day a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so...

Read More

• Alert
• Hot Topic
• International
• Vulnerabilities

CIRT-in flags Critical Flaw in Oracle Agile PLM Framework

By infosecbulletin / Thursday , November 28 2024

CERT-In has flagged a security vulnerability in Oracle’s Agile Product Lifecycle Management (PLM) software, identified as CVE-2024-21287 and cataloged as...

Read More

• International
• Vulnerabilities

Microsoft patches four vulnerabilities in its services

By infosecbulletin / Thursday , November 28 2024

On November 26th, Microsoft patched four vulnerabilities detected in Dynamics 365 Sales, the Partner.Microsoft.Com portal, Microsoft Copilot Studio and Azure...

Read More

• Cyber Attack
• Data Breach
• Vulnerabilities

Data broker exposes 600K+ passwordless sensitive files online

By infosecbulletin / Thursday , November 28 2024

SL Data Services/Propertyrec, an information research provider exposes a non-password-protected database containing more than 600K records according to the security...

Read More

• Hot Topic
• International

Cloudflare logs faces major failure, losing 55% of user data

By infosecbulletin / Wednesday , November 27 2024

Cloudflare suffered an incident roughly 3.5 hours On November 14, 2024 impacting the majority of customers using Cloudflare Logs. Cloudflare...

Read More

• Vulnerabilities

VMware Patched critical flaw in Aria Operations

By infosecbulletin / Wednesday , November 27 2024

VMware revealed several critical vulnerabilities in its Aria Operations product, with the most severe allowing attackers to gain root user...

Read More

• Cyber Attack
• Vulnerabilities

HDFC Life hit by data breach, begins investigation

By infosecbulletin / Wednesday , November 27 2024

On Monday, Indian HDFC life insurance said, They got some instances of data leaks. "We have received communication from an...

Read More

CVE-2024-38831 is a local privilege escalation vulnerability with a CVSSv3 score of 7.8.

CVE-2024-38832 is a stored XSS vulnerability that has a CVSSv3 score of 7.1.

CVE-2024-38833 is a stored XSS vulnerability with a CVSSv3 score of 6.8.

CVE-2024-38834: A third stored XSS vulnerability with a CVSSv3 score of 6.5.

Stored XSS vulnerabilities (CVE-2024-38832, CVE-2024-38833, CVE-2024-38834) let attackers with editing permissions inject harmful scripts into views, email templates, and cloud provider settings. These scripts can run when other users access those parts of the application.

Vulnerabilities affect VMware Aria Operations versions 8.x up to 8.18.1, as well as VMware Cloud Foundation versions 4.x and 5.x that include it.

Patches Released:

VMware has issued patches for vulnerabilities, and users should update to version 8.18.2 of VMware Aria Operations to fix all five issues. Since there are no workarounds, it’s important for organizations to apply the patches promptly.

VMware has recognized several security researchers, including those from MoyunSec Vlab, Bing, and the Michelin CERT team, for responsibly reporting vulnerabilities.