Firetruck

CVE-2022-22948

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
cloud_foundationvmware / cloud_foundation>= 3.0, < 3.11affected
cloud_foundationvmware / cloud_foundation>= 4.0, < 5.0affected
vcenter_servervmware / vcenter_server>= 6.5, < 6.5_u3raffected
vcenter_servervmware / vcenter_server>= 6.7, < 6.7_u3paffected
vcenter_servervmware / vcenter_server>= 7.0, < 7.0_u3daffected
VMware vCenter Server and VMware Cloud Foundationn/a / VMware vCenter Server and VMware Cloud FoundationVMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11)affected