CVE-2022-22948
The vCenter Server contains an information disclosure vulnerability due to improper permission of files.
Medium
Known exploited
- Severity
- 6.5 / 10
- Medium · CVSS 3.1
- Exploit chance (EPSS)
- 13.28%
- Chance of exploitation in the next 30 days. Higher than 96.39% of scored vulnerabilities.
- Known exploited
- Yes
- In CISA's catalog since Jul 17, 2024
- Fix
- None yet
- No fixed version published
Exploited in the wild. VMware vCenter Server Incorrect Default File Permissions Vulnerability (VMware vCenter Server). Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due for U.S. federal agencies by Aug 7, 2024.
Description
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
How to fix
No fixed version has been published yet. Until one is, remove or replace the package, or turn off or isolate the affected feature. This page updates when a fix ships.
Severity breakdown
CVSS 3.1 6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- Low
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Weakness
CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
How to prevent it
- Architecture and Design, Operation: The architecture needs to access and modification attributes for files to only those users who actually require those actions.
- Architecture and Design: Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area. Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
How to prevent it
- Architecture and Design, Operation: The architecture needs to access and modification attributes for files to only those users who actually require those actions.
- Architecture and Design: Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area. Ensure that appropriate compartmentalization is built into the system design, and the compartmentalization allows for and reinforces privilege separation functionality. Architects and designers should rely on the principle of least privilege to decide the appropriate time to use privileges and the time to drop privileges.
References
Advisories
Other links
Timeline
- Published
- Added to CISA's Known Exploited Vulnerabilities catalog
- Remediation due for U.S. federal agencies
- Last updated by the source
- Latest EPSS score
Related advisories
| Advisory | Severity | Why it's related |
|---|---|---|
| CVE-2026-87886 Local privilege escalation due to insecure file permissions. | High Known exploited | Same weakness, CWE-276 |
| GHSA-6x7x-gcmf-7r8x YesWiki vulnerable to unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` action | Critical | Same weakness, CWE-276 |
| GHSA-rwp6-7w3q-75fq OpenClaw: Config recovery could restore openclaw.json with broad file permissions | Medium | Same weakness, CWE-276 |
| GHSA-534h-c3cw-v3h9 Nuxt dev server vite-node IPC socket is world-connectable on Linux | Medium | Same weakness, CWE-276 |
| GHSA-99qx-5qqr-4j95 Apache ActiveMQ has an Incorrect Default Permissions vulnerability | High | Same weakness, CWE-276 |
| GHSA-q5f5-3gjm-7mfm Claude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool | Medium | Same weakness, CWE-276 |
| GHSA-vr7j-g7jv-h5mp OpenClaw session transcript files were created without forced user-only permissions | Medium | Same weakness, CWE-276 |
| GHSA-crjq-wm6x-6qx7 .NET Elevation of Privilege Vulnerability | High | Same weakness, CWE-276 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor