VMware Releases Security Update for Cloud Director

Security update released to address a critical remote code execution vulnerability in VMware Cloud Director 

Threat ID:: CC-4078
Threat Severity:: Information only
Published:: 19 April 2022 2:14 PM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Security update released to address a critical remote code execution vulnerability in VMware Cloud Director 

Affected platforms

The following platforms are known to be affected:

VMware Cloud Director

Threat details

Introduction

VMware has released security updates to address a critical remote code execution vulnerability in Cloud Director. This vulnerability, tracked as CVE-2022-22966, has a CVSSv3 severity rating of 9.1. An attacker could exploit this vulnerability to take control of an affected system.

Remediation advice

Affected organisations are encouraged to review VMware security advisory VMSA-2022-0013 and apply any relevant updates or workarounds.

Definitive source of threat updates

https://www.vmware.com/security/advisories/VMSA-2022-0013.html

CVE Vulnerabilities

Status Published

CVE-2022-22966

An authenticated, high privileged malicious actor with network access to the VMware Cloud Director tenant or provider may be able to exploit a remote code execution vulnerability to gain access to the server.

Last edited: 19 April 2022 2:28 pm