---
title: "Security digest: March 29, 2022"
url: https://erroneo.us/security/2022-03-29/
description: "March 29, 2022 vulnerability digest: 1 brief (vCenter CVE-2022-22948: DB Credential Leak Used…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2022-03-29
date_modified: 2026-10-23
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: March 29, 2022

1 editorial brief.

## Take stock

- Check exposure: vCenter CVE-2022-22948: DB Credential Leak Used by UNC3886 . Teams with any vCenter Server Appliance on 6.5, 6.7 or 7.0, patched or not, since those lines are out of general support and later vCenter bugs are also exploited.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [vCenter CVE-2022-22948: DB Credential Leak Used by UNC3886](https://erroneo.us/security/briefs/vcenter-cve-2022-22948-postgres-credential-exposure/index.md): Fixed since March 2022 and only useful to someone already on the appliance, but an espionage group used it to reach ESXi hosts; make sure no vCenter is still on an old 6.x or 7.0 build, and hunt if one was.

## Known exploited (CISA KEV)

None.

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2022-03-29/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt