Detections
Analytics
CVE-2022-22948
medium
Description
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
From the Tenable Blog
CVE-2022-22948: VMware vCenter Server Sensitive Information Disclosure Vulnerability
Published: 2022-03-30
Researchers disclose a moderate severity vulnerability in VMware vCenter Server that can be used in an exploit chain with other vCenter Server flaws to take over servers.
References
https://www.securityweek.com/recent-adobe-commerce-vulnerability-exploited-in-wild/
https://thehackernews.com/2024/06/chinese-cyber-espionage-group-exploits.html
https://cloud.google.com/blog/topics/threat-intelligence/uncovering-unc3886-espionage-operations
https://www.tenable.com/cyber-exposure/tenable-2022-threat-landscape-report
https://www.vmware.com/security/advisories/VMSA-2022-0009.html