{"id":"CVE-2022-22948","aliases":["EUVD-2022-28072","GHSA-mgm9-ffv2-wpc6"],"status":"published","title":"The vCenter Server contains an information disclosure vulnerability due to improper permission of...","description":"The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.13282,"percentile":0.96439,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-276"],"published":"2022-03-29T17:24:33Z","modified":"2026-06-17T04:29:13Z","kev":{"date_added":"2024-07-17","due_date":"2024-08-07","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2024-07-17"},{"source":"kev","since":"2024-07-17"}],"exploits":[{"source":"pocgithub","id":"PenteraIO/CVE-2022-22948","title":"PenteraIO/CVE-2022-22948","date":"2021-10-17","url":"https://github.com/PenteraIO/CVE-2022-22948"},{"source":"metasploit","id":"post/linux/gather/vcenter_secrets_dump","title":"VMware vCenter Secrets Dump","type":"post","platform":"Linux,Unix","date":"2022-04-15","verified":true,"url":"https://www.rapid7.com/db/modules/post/linux/gather/vcenter_secrets_dump"}],"products":[{"vendor":"vmware","product":"cloud_foundation"},{"vendor":"vmware","product":"vcenter server"},{"vendor":"vmware","product":"vcenter_server"}],"references":[{"url":"https://www.vmware.com/security/advisories/VMSA-2022-0009.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22948","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22948"},{"url":"https://github.com/advisories/GHSA-mgm9-ffv2-wpc6"}],"sources":{"cve":[{"id":"CVE-2022-22948","description":"The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.","status":"published","published":"2022-03-29T17:24:33Z","modified":"2025-10-21T23:15:43.268Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:34:26.645563Z"}],"euvd":[{"id":"EUVD-2022-28072","description":"The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.","status":"published","published":"2022-03-29T17:24:33Z","modified":"2025-10-21T23:15:43Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"exploited_since":"2024-07-17","updated_at":"2026-11-02T20:31:26.48918Z"}],"ghsa":[{"id":"GHSA-mgm9-ffv2-wpc6","title":"The vCenter Server contains an information disclosure vulnerability due to improper permission of...","description":"The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.","status":"published","published":"2022-03-30T00:00:14Z","modified":"2025-10-22T00:32:32Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T15:04:05.954742Z"}],"kev":[{"id":"CVE-2022-22948","title":"VMware vCenter Server Incorrect Default File Permissions Vulnerability ","description":"VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.","cwes":["CWE-276"],"kev":{"date_added":"2024-07-17","due_date":"2024-08-07","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2022-22948","description":"The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.","status":"published","published":"2022-03-29T18:15:08.04Z","modified":"2026-06-17T04:29:13.573Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:07:14.706146Z"}]}}