PT-2022-4132 · Vmware · Vmware Cloud Foundation+2

Published 2022-07-12 · Updated 2022-07-20 · CVE-2022-22982

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware vCenter Server (affected versions not specified) VMware Cloud Foundation (affected versions not specified)

Description The issue is related to insufficient validation of incoming requests, allowing a remote attacker to perform a server-side request forgery (SSRF) attack by sending specially crafted requests to port 443. This could enable the attacker to access a URL request outside of vCenter Server or access an internal service.

Recommendations For VMware vCenter Server, restrict access to port 443 until a patch is available. For VMware Cloud Foundation, consider disabling access to internal services until the issue is resolved. As a temporary workaround, consider limiting network access to the vCenter Server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2022-04973

CVE-2022-22982

Affected Products

Vmware Vcenter

Vmware Cloud Foundation

Vmware Vcenter Server

References · 6

• https://vmware.com/security/advisories/VMSA-2022-0018.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04973 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22982 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22982 · Security Note
• https://t.me/cvenotify/33005 · Telegram Post
• https://t.me/cibsecurity/46187 · Telegram Post