CVE-2022-22948
Published 2022-03-29 · Updated 2026-06-17 · Source security@vmware.com
Summary
CVE-2022-22948 is a medium-severity (CVSS 6.5) vulnerability in VMware vCenter Server. CISA added it to the Known Exploited Vulnerabilities catalog on July 17, 2024, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by August 7, 2024. CISA does not currently list it as used in ransomware campaigns. VMware has 26 vulnerabilities in the KEV catalog, 9 of them linked to ransomware.
All 26 known-exploited VMware vulnerabilities →Description
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CISA Known-Exploited Vulnerability
Product: VMware — vCenter Server
Name: VMware vCenter Server Incorrect Default File Permissions Vulnerability
Date added: 2024-07-17 · Due: 2024-08-07
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.