CVE-2022-22983

EPSS 0.18%
Veröffentlicht 10.08.2022 20:15:30
Zuletzt bearbeitet 21.11.2024 06:47:44
Quelle security@vmware.com
Teams Watchlist Login
Unerledigt Login

VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware Workstation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

VMware ≫ Workstation Version >= 16.0.0 < 16.2.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.394

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.9	1.5	4	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

https://www.vmware.com/security/advisories/VMSA-2022-0023.html

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-22983

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-22983

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-22983

EUVD