CVE-2022-22983

MEDIUM

VMware Workstation 16.0.0-16.2.3 - Unprotected Storage of Credentials

Title source: llm
STIX 2.1

Description

VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware Workstation.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_misc
https://www.vmware.com/security/advisories/VMSA-2022-0023.html

Scores

CVSS v3 5.9
EPSS 0.0008
EPSS Percentile 22.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

Details

CWE
CWE-522
Status published
Products (1)
vmware/workstation 16.0.0 - 16.2.4
Published Aug 10, 2022
Tracked Since Feb 18, 2026