# CVE-2022-22948

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

- Page: https://www.vulneraibility.com/cve/CVE-2022-22948
- CVSS: 6.5
- Known exploited: yes, in CISA KEV since 2024-07-17; CISA due date 2024-08-07
- EPSS: 13.28% (percentile 96.4)
- Unvetted proof-of-concept code on GitHub: 1 Metasploit module · 1 GitHub proof of concept
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2024-07-18)
- Weakness: CWE-276
- Published: 2022-03-29

## Affected versions

- VMware vCenter Server and VMware Cloud Foundation: affected VMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11)

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://www.vmware.com/security/advisories/VMSA-2022-0009.html
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22948

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.