Логотип exploitDog
bind:CVE-2022-22951
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-22951

Количество 3

Количество 3

nvd логотип

CVE-2022-22951

почти 4 года назад

VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains an OS command injection vulnerability. An authenticated, high privileged malicious actor with network access to the VMware App Control administration interface may be able to execute commands on the server due to improper input validation leading to remote code execution.

CVSS3: 9.1
EPSS: Низкий
github логотип

GHSA-hgxf-8v8v-6qg4

почти 4 года назад

VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains an OS command injection vulnerability. An authenticated, high privileged malicious actor with network access to the VMware App Control administration interface may be able to execute commands on the server due to improper input validation leading to remote code execution.

CVSS3: 9.1
EPSS: Низкий
fstec логотип

BDU:2022-01437

около 4 лет назад

Уязвимость интерфейса администрирования сервера для управления приложениями VMware Carbon Black App Control, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-22951

VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains an OS command injection vulnerability. An authenticated, high privileged malicious actor with network access to the VMware App Control administration interface may be able to execute commands on the server due to improper input validation leading to remote code execution.

CVSS3: 9.1
5%
Низкий
почти 4 года назад
github логотип
GHSA-hgxf-8v8v-6qg4

VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains an OS command injection vulnerability. An authenticated, high privileged malicious actor with network access to the VMware App Control administration interface may be able to execute commands on the server due to improper input validation leading to remote code execution.

CVSS3: 9.1
5%
Низкий
почти 4 года назад
fstec логотип
BDU:2022-01437

Уязвимость интерфейса администрирования сервера для управления приложениями VMware Carbon Black App Control, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.1
5%
Низкий
около 4 лет назад

Уязвимостей на страницу