PT-2022-2184 · Vmware · Vmware Vcenter Server+1

Ul7Ravi0L3T + 1 · Published 2022-01-10 · Updated 2025-07-29 · CVE-2022-22948

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware vCenter Server (affected versions not specified)

Description The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information. The vulnerability is related to insufficient access control to the file /etc/vmware-vpx/vcdb.properties, which contains credentials in plain text.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Incorrect Default Permissions

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-269

CWE-276

CWE-319

CWE-275

CWE-264

Related Identifiers

BDU:2022-02210

CVE-2022-22948

Affected Products

Vmware Vcenter

Vmware Vcenter Server

References · 28

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/post/linux/gather/vcenter_secrets_dump.rb · Exploit
• 🔥 https://github.com/PenteraIO/CVE-2022-22948 · Exploit
• 🔥❌ https://github.com/kaanymz/cve-2022-22948-vcenter · Exploit, Deleted
• 🔥❌ https://github.com/kaanymz/researching-cve-2022-22948-vcenter · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2022-22948 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22948 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02210 · Security Note
• https://t.me/cvenotify/86580 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22948 · Note
• https://t.me/aptreports/20817 · Telegram Post
• https://pentera.io/blog/information-disclosure-in-vmware-vcenter · Note
• https://t.me/cibsecurity/39771 · Telegram Post
• https://t.me/ckure/11073 · Telegram Post
• https://t.me/aptreports/10663 · Telegram Post
• https://vmware.com/security/advisories/VMSA-2022-0009.html · Vendor Advisory, Security Note