Security Advisory

CVE-2022-22952

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-23 19:46:47

Last updated 2024-08-03 03:28:42

Assigner vmware

State PUBLISHED

Description

VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains a file upload vulnerability. A malicious actor with administrative access to the VMware App Control administration interface may be able to execute code on the Windows instance where AppC Server is installed by uploading a specially crafted file.

← Browse all CVEs View on cve.org ↗