VMware Aria Operations for Logs (credential disclosure): A View Only Admin reads the credentials of other VMware

Impact

A View Only Admin reads the credentials of other VMware products integrated with Aria Operations for Logs - so the lowest-privilege admin role yields credentials for vCenter and friends.

Who can reach it

Authenticated View Only Admin on Aria Operations for Logs.

What to do

Apply the Broadcom fix per advisory 25329, then rotate the integration credentials that were stored - anyone holding that role could already have read them.

References