VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains a file upload vulnerability. A malicious actor with administrative access to the VMware App Control administration interface may be able to execute code on the Windows instance where AppC Server is installed by uploading a specially crafted file.
References
| Link | Resource |
|---|---|
| https://www.vmware.com/security/advisories/VMSA-2022-0008.html | Patch Vendor Advisory |
| https://www.vmware.com/security/advisories/VMSA-2022-0008.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 06:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.vmware.com/security/advisories/VMSA-2022-0008.html - Patch, Vendor Advisory |
31 Mar 2022, 18:58
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:vmware:carbon_black_app_control:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 9.0
v3 : 9.1 |
| CWE | CWE-434 | |
| References | (MISC) https://www.vmware.com/security/advisories/VMSA-2022-0008.html - Patch, Vendor Advisory |
23 Mar 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-03-23 20:15
Updated : 2024-11-21 06:47
NVD link : CVE-2022-22952
Mitre link : CVE-2022-22952
CVE.ORG link : CVE-2022-22952
JSON object : View
Products Affected
vmware
- carbon_black_app_control
microsoft
- windows
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type