Read the docs
TI-2022-07126 Aliases CVE-2022-22948GHSA-mgm9-ffv2-wpc6

Incorrect default permissions in VMware vCenter Server and VMware Cloud Foundation

Priority CRITICAL 88Exploited in the wildCWE-276Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

Why it matters now

Exploitation Active In CISA KEV since 2024-07-17CISA due date 2024-08-07
EPSS 0.13282 96th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—VMware vCenter Server and VMware Cloud FoundationVMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11)—No fix listedCNA
  • VMware vCenter Server and VMware Cloud Foundation Vendor— Affected VMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11) Fixed in — No fix listed CNA

CPE configurations NVD · 62

CPEVersionsRoleVendor
cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*3.0 to before 3.11; 4.0 to before 4.4.1VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*6.5VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:*6.5 aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:*6.5 bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:*6.5 cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:*6.5 dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:*6.5 eVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:*6.5 fVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:*6.5 update1VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:*6.5 update1bVulnerableVMware
  • cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:* Versions 3.0 to before 3.11; 4.0 to before 4.4.1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:* Versions 6.5 a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:* Versions 6.5 b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:* Versions 6.5 c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:* Versions 6.5 d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:* Versions 6.5 e Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:* Versions 6.5 f Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1:*:*:*:*:*:* Versions 6.5 update1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1b:*:*:*:*:*:* Versions 6.5 update1b Vulnerable ·VMware
Show 52 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:*6.5 update1cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:*6.5 update1dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:*6.5 update1eVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:*6.5 update1gVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:*6.5 update2VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:*6.5 update2bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:*6.5 update2cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:*6.5 update2dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:*6.5 update2gVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:*6.5 update3VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:*6.5 update3dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:*6.5 update3fVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:*6.5 update3kVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:*6.5 update3nVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update3p:*:*:*:*:*:*6.5 update3pVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.5:update3q:*:*:*:*:*:*6.5 update3qVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*6.7VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:*6.7 aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:*6.7 bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:*6.7 dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:*6.7 update1VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:*6.7 update1bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:*6.7 update2VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:*6.7 update2aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:*6.7 update2cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:*6.7 update3VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:*6.7 update3aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:*6.7 update3bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:*6.7 update3fVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:*6.7 update3gVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:*6.7 update3jVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3l:*:*:*:*:*:*6.7 update3lVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3m:*:*:*:*:*:*6.7 update3mVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3n:*:*:*:*:*:*6.7 update3nVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:6.7:update3o:*:*:*:*:*:*6.7 update3oVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*7.0VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:*7.0 aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*7.0 bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:*7.0 cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:*7.0 dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:*7.0 update1VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:*7.0 update1aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:*7.0 update1cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:*7.0 update1dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:*7.0 update2VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:*7.0 update2aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update2b:*:*:*:*:*:*7.0 update2bVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update2c:*:*:*:*:*:*7.0 update2cVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update2d:*:*:*:*:*:*7.0 update2dVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update3:*:*:*:*:*:*7.0 update3VulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update3a:*:*:*:*:*:*7.0 update3aVulnerableVMware
cpe:2.3:a:vmware:vcenter_server:7.0:update3c:*:*:*:*:*:*7.0 update3cVulnerableVMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1c:*:*:*:*:*:* Versions 6.5 update1c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:* Versions 6.5 update1d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:* Versions 6.5 update1e Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:* Versions 6.5 update1g Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:* Versions 6.5 update2 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:* Versions 6.5 update2b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:* Versions 6.5 update2c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:* Versions 6.5 update2d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:* Versions 6.5 update2g Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:* Versions 6.5 update3 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:* Versions 6.5 update3d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:* Versions 6.5 update3f Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:* Versions 6.5 update3k Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update3n:*:*:*:*:*:* Versions 6.5 update3n Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update3p:*:*:*:*:*:* Versions 6.5 update3p Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.5:update3q:*:*:*:*:*:* Versions 6.5 update3q Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:* Versions 6.7 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:* Versions 6.7 a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:* Versions 6.7 b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:* Versions 6.7 d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:* Versions 6.7 update1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:* Versions 6.7 update1b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:* Versions 6.7 update2 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:* Versions 6.7 update2a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:* Versions 6.7 update2c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:* Versions 6.7 update3 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:* Versions 6.7 update3a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:* Versions 6.7 update3b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:* Versions 6.7 update3f Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:* Versions 6.7 update3g Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:* Versions 6.7 update3j Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3l:*:*:*:*:*:* Versions 6.7 update3l Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3m:*:*:*:*:*:* Versions 6.7 update3m Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3n:*:*:*:*:*:* Versions 6.7 update3n Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:6.7:update3o:*:*:*:*:*:* Versions 6.7 update3o Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:* Versions 7.0 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:* Versions 7.0 a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:* Versions 7.0 b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:* Versions 7.0 c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:* Versions 7.0 d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:* Versions 7.0 update1 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:* Versions 7.0 update1a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:* Versions 7.0 update1c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:* Versions 7.0 update1d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:* Versions 7.0 update2 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:* Versions 7.0 update2a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update2b:*:*:*:*:*:* Versions 7.0 update2b Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update2c:*:*:*:*:*:* Versions 7.0 update2c Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update2d:*:*:*:*:*:* Versions 7.0 update2d Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3:*:*:*:*:*:* Versions 7.0 update3 Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3a:*:*:*:*:*:* Versions 7.0 update3a Vulnerable ·VMware
  • cpe:2.3:a:vmware:vcenter_server:7.0:update3c:*:*:*:*:*:* Versions 7.0 update3c Vulnerable ·VMware

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2024-07-17 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2022-22948
  3. 2026-10-03 Alias added: GHSA-mgm9-ffv2-wpc6

References

Patch 1

  • TI-2024-26040 Privilege escalation in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-26039 Heap-overflow in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-24610 Out-of-bounds write in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-07131 Code injection in VMware Workspace ONE Access and Identity Manager KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-05049 Path traversal in VMware vCenter Server, VMware Cloud Foundation KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-05029 Improper input validation in VMware vCenter Server and VMware Cloud Foundation KEVCVSS 3.1CRITICAL 9.8
See all 134 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences