CVE-2022-22983

5.9MEDIUM

Key Information:

Vendor
Vmware
Status
Vmware Workstation
Vendor
CVE Published:
10 August 2022

Summary

VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware Workstation.

Affected Version(s)

VMware Workstation VMware Workstation (16.x prior to 16.2.4)

References

https://www.vmware.com/security/advisories/VMSA-2022-0023...
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.