vulnerability

VMware vCenter Server: CVE-2022-22948 (VMSA-2022-0009)

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Mar 29, 2022
Added
Jul 25, 2022
Modified
Jul 18, 2024

Description

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

Solution

vmware-vcenter-server-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.