Actively exploited in the wild
VMware vCenter Server Incorrect Default File Permissions Vulnerability
VMware - vCenter Server · Listed in the CISA KEV since 2024-07-17. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2022-22948
MediumCVSS 6.5KEVSummary
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
Risk Assessment
A user without administrative privileges could gain access to sensitive data, potentially leading to a breach of confidentiality and further attacks on the virtual infrastructure.
Recommendation
Update vCenter Server to the latest version containing the fix. Verify and correct file permissions to restrict access to sensitive information.
Other vulnerabilities in vCenter Server
See all- CVE-2024-38812CriticalActively exploited
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet, potentially leading to remote code execution.
- CVE-2024-37079CriticalActively exploited
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
- CVE-2021-22017MediumActively exploited
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.
Original NVD description (English source)
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.