CVE-2022-22908

PoC —

CVSS 3.1

5.5 medium

EPSS

<1%p20

Published

Feb 26, 2022 (Feb 26, 2022)

Modified

Jun 17, 2026

Description

SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields.

Vendors: sangfor
Products: vdi client
Weakness: CWE-522
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.