Cisco Virtualized Infrastructure Manager

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:cisco_virtualized_infrastructure_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductCisco Virtualized Infrastructure Manager (980ba4b7-4f01-584f-9198-f9a06f5bd947)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-20732 vulnerable 2026-06-08 05:39:54.531822 Cisco Virtualized Infrastructure Manager Privilege Escalation Vulnerability
HIGH (7.8)
A vulnerability in the configuration file protections of Cisco Virtualized Infrastructure Manager (VIM) could allow an authenticated, local attacker to access confidential information and elevate privileges on an affected device. This vulnerability is due to improper access permissions for certain configuration files. An attacker with low-privileged credentials could exploit this vulnerability by accessing an affected device and reading the affected configuration files. A successful exploit could allow the attacker to obtain internal database credentials, which the attacker could use to view and modify the contents of the database. The attacker could use this access to the database to elevate privileges on the affected device.
Published: 2022-04-21T18:55:10.749Z
Updated: 2024-11-06T16:21:38.813Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.