CVE Watch—

CVE-2022-22948

VMware vCenter Server Incorrect Default File Permissions Vulnerability

CVSS

—

Sin CVSS

EPSS

13.3%

p96

KEV

SÍ

17 jul 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

13.3%EPSS · 30 días13.3%

2026-09-172026-10-14

Ficha del catálogo KEV

Producto

VMware / vCenter Server

Vulnerabilidad

VMware vCenter Server Incorrect Default File Permissions Vulnerability

Añadido a KEV

17 jul 2024

Remediar antes de

7 ago 2024

Uso conocido en ransomware

Descripción resumida

VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.vmware.com/security/advisories/VMSA-2022-0009.html; https://nvd.nist.gov/vuln/detail/CVE-2022-22948

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2021-219859.8 CRÍ

100.0%

KEV—80VMware vCenter Server Improper Input Validation Vulnerability65d CVE-2021-219729.8 CRÍ

100.0%

KEV—80VMware vCenter Server Remote Code Execution Vulnerability65d CVE-2021-22005—

100.0%

KEV—80VMware vCenter Server File Upload Vulnerability—CVE-2023-34048—

99.9%

KEV—80VMware vCenter Server Out-of-Bounds Write Vulnerability—CVE-2020-3952—

99.8%

KEV—80VMware vCenter Server Information Disclosure Vulnerability—CVE-2024-38812—

99.0%

KEV—80VMware vCenter Server Heap-Based Buffer Overflow Vulnerability—