VMware vCenter Server Incorrect Default File Permissions Vulnerability (CVE-2022-22948)

A remote attacker, with a low-privilege account, can achieve full data confidentiality loss. Federal agencies are required to remediate by 2024-08-07 under CISA BOD 22-01.

This is a Incorrect Default Permissions (CWE-276) vulnerability in VMware vCenter Server. The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information. Exploitation requires remote network access, low attack complexity, a low-privilege authenticated account, and no user interaction required.

Probably yes if any of these apply:

CISA added this CVE to the Known Exploited Vulnerabilities catalog on 2024-07-17 based on evidence of active exploitation in the wild. Federal agencies required to remediate by 2024-08-07.