CVE-2022-22948 · Sandworm Watch

Jul 17, 2024high

CVE-2022-22948: VMware vCenter Server Incorrect Default File Permissions Vulnerability

VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2022-22948EPSS 13.9%VMwarevCenter Server

CISA KEV ↗ · unattributed attribution