What is CVE-2022-22983?

CVE-2022-22983 is a medium-severity vulnerability in Vmware Workstation, classified under Insufficiently Protected Credentials. CVSS score: 5.9/10. Published 2022-08-10.

How severe is CVE-2022-22983?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Vmware Workstation

CVE-2022-22983

VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware Workstation.

EPSS: 0.003 (21.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N.

Affected products

Vmware Workstation
N/a Vmware Workstation — versions VMware Workstation (16.x prior to 16.2.4)

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

security@vmware.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-22983?: CVE-2022-22983 is a medium-severity vulnerability in Vmware Workstation, classified under Insufficiently Protected Credentials. CVSS score: 5.9/10. Published 2022-08-10.
How severe is CVE-2022-22983?: Medium severity. CVSS v3 base score is 5.9 out of 10.