← CVE Radar
CVE-2022-22948VMware vCenter Server Incorrect Default File Permissions Vulnerability
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
6.5 MEDIUMEPSS 13.28%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.5 | MEDIUM | 3.1CISA-ADP | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Details
- CVE ID
- CVE-2022-22948
- Status
- Published
- Assigner (CNA)
- vmware
- Published
- Mar 29, 2022
- Last modified
- 2025-10-21 23:15 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
VMware vCenter Server and VMware Cloud Foundation1 version range
- VMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11)
References
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS