CVE-2022-22948

2022-03-2917:24:33

vmware

www.cve.org

vcenter server

information disclosure

improper permission

sensitive information

AI Score

6.7

Confidence

High

EPSS

0.008

Percentile

81.6%

JSON

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

CNA Affected

[
  {
    "product": "VMware vCenter Server and VMware Cloud Foundation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11)"
      }
    ]
  }
]