Vulnerability Description
VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains a file upload vulnerability. A malicious actor with administrative access to the VMware App Control administration interface may be able to execute code on the Windows instance where AppC Server is installed by uploading a specially crafted file.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vmware | Carbon Black App Control | >= 8.5, < 8.5.14 |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- https://www.vmware.com/security/advisories/VMSA-2022-0008.htmlPatchVendor Advisory
- https://www.vmware.com/security/advisories/VMSA-2022-0008.htmlPatchVendor Advisory
FAQ
What is CVE-2022-22952?
CVE-2022-22952 is a vulnerability with a CVSS score of 9.1 (CRITICAL). VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains a file upload vulnerability. A malicious actor with administrative...
How severe is CVE-2022-22952?
CVE-2022-22952 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2022-22952?
Check the references section above for vendor advisories and patch information. Affected products include: Vmware Carbon Black App Control, Microsoft Windows.