[ CVE-2022-22948 · Published 29 Mar 2022 ]
VMware vCenter Server Incorrect Default File Permissions Vulnerability
Exploited · CISA KEV CVSS 6.5
EPSS 13%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2024-07-17
- EPSS: 13% chance of exploitation in the next 30 days (higher than 96% of CVEs)
[ Description ]Official description
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
CISA: VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 7 Aug 2024): Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Patch on vmware.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- www.vmware.com/security/advisories/VMSA-2022-0009.htmlPatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource