CVE-2022-22908

CVE-2022-22908 describes a vulnerability in Sangfor VDI Client version 5.4.2.1006, where the SangforCSClient.exe process stores sensitive user credentials (username and password) in memory. An attacker with the ability to read process memory on the affected system can discover these credentials, leading to a compromise of confidentiality. This vulnerability is rated Medium severity with a CVSS score of 5.5, indicating a local attack vector with low attack complexity and requiring low privileges. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.