VMware · vCenter Server
CVE-2022-22948
VMware vCenter Server Incorrect Default File Permissions Vulnerability
What it is
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
CISA: VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Deadline for US federal agencies: August 7, 2024
- Added to the CISA list
- July 17, 2024
- Published
- March 29, 2022
- Severity
- Medium 6.5 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 13% in the top 3.6% of all known vulnerabilities
- Weakness
- CWE-276
- More details
- NVD · CVE.org · CISA
All references (1)
More exploited flaws from VMware
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Nov 20, 2024 | Heap-Based Buffer Overflow | vCenter Server | Critical 9.8 | 55% |
| Nov 20, 2024 | Privilege Escalation | vCenter Server | High 7.5 | 17% |
| Jan 22, 2024 | Out-of-Bounds Write | vCenter Server | Critical 9.8 | 99.2% |
| Jan 10, 2022 | Improper Access Control | vCenter Server | Medium 5.3 | 49% |
| Nov 3, 2021 | Information Disclosure | vCenter Server | Critical 9.8 | 90% |
| Nov 3, 2021 | Remote Code Execution | vCenter Server | Critical 9.8 | 99.9% |
| Nov 3, 2021 | Improper Input Validation | vCenter Server | Critical 9.8 | >99.9% |
| Nov 3, 2021 | File Upload | vCenter Server | Critical 9.8 | >99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.