CVE-2025-22238

{"id": "CVE-2025-22238", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 0.6}]}, "published": "2025-06-13T07:15:21.150", "references": [{"url": "https://docs.saltproject.io/en/3006/topics/releases/3006.12.html", "source": "security@vmware.com"}, {"url": "https://docs.saltproject.io/en/3007/topics/releases/3007.4.html", "source": "security@vmware.com"}], "vulnStatus": "Received", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory."}, {"lang": "es", "value": "Ataque de directory traversal al crear la cach\u00e9 de archivos de los minions. La cach\u00e9 predeterminada del maestro es vulnerable a un ataque de directory traversal. Este ataque podr\u00eda usarse para escribir o sobrescribir archivos de cach\u00e9 fuera del directorio de cach\u00e9."}], "lastModified": "2025-06-13T14:15:19.610", "sourceIdentifier": "security@vmware.com"}