PT-2022-1901 · Vmware · Vmware Carbon Black App Control

Jari Jääskelä + 1 · Published 2022-01-10 · Updated 2022-03-29 · CVE-2022-22951

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Carbon Black App Control versions 8.5.x prior to 8.5.14 VMware Carbon Black App Control versions 8.6.x prior to 8.6.6 VMware Carbon Black App Control versions 8.7.x prior to 8.7.4 VMware Carbon Black App Control versions 8.8.x prior to 8.8.2

Description The issue exists due to improper input validation in the administration interface of VMware Carbon Black App Control, allowing an authenticated, high-privileged malicious actor with network access to execute commands on the server. This can lead to remote code execution.

Recommendations For versions 8.5.x prior to 8.5.14, update to version 8.5.14 or later. For versions 8.6.x prior to 8.6.6, update to version 8.6.6 or later. For versions 8.7.x prior to 8.7.4, update to version 8.7.4 or later. For versions 8.8.x prior to 8.8.2, update to version 8.8.2 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2022-01437

CVE-2022-22951

Affected Products

Vmware Carbon Black App Control

References · 9

• https://vmware.com/security/advisories/VMSA-2022-0008.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22951 · Security Note
• https://bdu.fstec.ru/vul/2022-01437 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22951 · Vendor Advisory
• https://vuldb.com/?id.195659 · Note
• https://t.me/true_secator/2768 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2022032311 · Note
• https://t.me/cibsecurity/39443 · Telegram Post
• https://t.me/thehackernews/2006 · Telegram Post