CVE-2022-20732

CVE-2022-20732 is a vulnerability in Cisco Virtualized Infrastructure Manager (VIM) caused by improper access permissions to configuration files. An authenticated, local attacker with low-privileged credentials can exploit this to access confidential information and elevate privileges. The vulnerability has a CVSS score of 7.8 (HIGH), indicating a low attack complexity and the potential for high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the CISA KEV catalog, though it has received limited community discussion and media coverage.