The VMware Carbon Black App Control Server 8.5.x to 8.8.x contains a critical security vulnerability.
The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifiers CVE-2022-22951 and CVE-2022-22952 to this issue. We strongly recommend that you upgrade as soon as possible.
For more information, see the VMware Security Advisory: VMSA-2022-0008. For questions and assistance with installation please contact customer support.
We have provided security patches for customers on server versions 8.5.0+ which includes versions 8.5.14, 8.6.6, 8.7.4, and 8.8.2.
Downloads and Documentation
For more details regarding the above security releases, including the download links and release notes can be found in VMWare Docs.