CVE-2022-22939

2022-02-0422:29:14

vmware

www.cve.org

vmware cloud foundation

plaintext

credential disclosure

vulnerability

sddc manager

logging

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

26.8%

JSON

VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log files on the SDDC Manager. A malicious actor with root access on VMware Cloud Foundation SDDC Manager may be able to view credentials in plaintext within one or more log files.

CNA Affected

[
  {
    "product": "VMware Cloud Foundation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Cloud Foundation 4.x (before 4.3.1.1) and 3.x"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2022-0003.html