CVE-2022-22948

Timeline

Detection, updates, and resolution for this record.

1. Mar 29, 2022 · Catalog

   Detected

   The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

2. Jul 17, 2024 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

3. Aug 7, 2024 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

4. Jun 16, 2026 · Catalog

   Updated

   The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

Affected

• cpe vmware/cloud foundationversion unspecified
• cpe vmware/vcenter server6.5
• vendor VMware vCenter Serverversion unspecified

Sources

• CISA KEVCVE-2022-22948

  VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.

  cisa.gov
• CVE.orgCVE-2022-22948

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2022-22948

  30-day exploitation probability 13.3%

  first.org
• Metasploit Modulespost_linux/gather/vcenter_secrets_dump

  Public module reference (normal). Module source is not copied into this catalog.

  rapid7.com
• NIST NVDCVE-2022-22948

  The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov
• CISA note · vmware.com