CVE-2022-22948

Name of the Vulnerable Software and Affected Versions VMware vCenter Server (affected versions not specified)

Description The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information. The vulnerability is related to insufficient access control to the file /etc/vmware-vpx/vcdb.properties, which contains credentials in plain text.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.