CVE-2022-22983

EPSS 0.18%
Published 10.08.2022 20:15:30
Last modified 21.11.2024 06:47:44
Source security@vmware.com
Teams watchlist Login
Open Login

VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware Workstation.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

VMware ≫ Workstation Version >= 16.0.0 < 16.2.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.18%	0.394

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.9	1.5	4	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

https://www.vmware.com/security/advisories/VMSA-2022-0023.html

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-22983

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-22983

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-22983

EUVD