CVE-2022-22948
KEVVMware vCenter Server Incorrect Default File Permissions Vulnerability
View CVE record →- Vendor / Project
- VMware
- Product
- vCenter Server
- Date added
- Jul 17, 2024
- Due date
- Aug 7, 2024
- Known ransomware use
- Unknown
- CWEs
- CWE-276
Description
VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.