CVE-2022-22952: Malicious File Upload
VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains a file upload vulnerability. A malicious actor with administrative access to the VMware App Control administration interface may be able to execute code on the Windows instance where AppC Server is installed by uploading a specially crafted file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-22952?
CVE-2022-22952 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2022-22952?
To mitigate CVE-2022-22952, update VMware Carbon Black App Control to version 8.5.14 or later, 8.6.6 or later, 8.7.4 or later, or 8.8.2 or later.
What versions of VMware Carbon Black App Control are affected by CVE-2022-22952?
CVE-2022-22952 affects VMware Carbon Black App Control versions prior to 8.5.14, 8.6.6, 8.7.4, and 8.8.2.
What kind of vulnerability is CVE-2022-22952?
CVE-2022-22952 is a file upload vulnerability that can be exploited by an authenticated attacker.
Who is impacted by CVE-2022-22952?
Administrators with access to the VMware App Control administration interface may be impacted by CVE-2022-22952.