Beveiligingsadvies

CVE-2022-22951

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-03-23 19:46:46
Laatst bijgewerkt 2024-08-03 03:28:42
Toegewezen door vmware
CVSS-score geen score
Status PUBLISHED

Beschrijving

VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains an OS command injection vulnerability. An authenticated, high privileged malicious actor with network access to the VMware App Control administration interface may be able to execute commands on the server due to improper input validation leading to remote code execution.