Versio.io

CVE-2022-22948

Common vulnerabilities & exposures (CVE)

CVE databaseCVE database blogpostRelease & EoL database
 
Published at: - 29-03-2022 08:15
Last modified: - 08-04-2022 02:58
Total changes: - 2

Description

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Low
Attack complexity
Network
Attack vector
None
Availability
High
Confidentiality
None
Integrity
Low
Privileges required
Unchanged
Scope
None
User interaction
6.5
Base score
2.8
3.6
Exploitability score
Impact score
 

Verification logic

OR
vendor=vmware AND product=cloud_foundation AND versionStartIncluding=3.0 AND versionEndExcluding=3.11
vendor=vmware AND product=cloud_foundation AND version=3.11
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=-
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=a
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=b
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=c
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=d
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=e
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=f
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update1
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update1b
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update1c
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update1d
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update1e
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update1g
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update2
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update2b
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update2c
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update2d
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update2g
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update3
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update3d
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update3f
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update3k
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update3n
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update3p
vendor=vmware AND product=vcenter_server AND version=6.5 AND update=update3q
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=-
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=a
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=b
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=d
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update1
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update1b
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update2
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update2a
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update2c
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update3
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update3a
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update3b
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update3f
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update3g
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update3j
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update3l
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update3m
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update3n
vendor=vmware AND product=vcenter_server AND version=6.7 AND update=update3o
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=-
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=a
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=b
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=c
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=d
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=update1
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=update1a
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=update1c
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=update1d
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=update2
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=update2a
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=update2b
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=update2c
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=update2d
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=update3
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=update3a
vendor=vmware AND product=vcenter_server AND version=7.0 AND update=update3c
 

Reference

 


Keywords

NVD

 

CVE-2022-22948

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures

 

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.