CVE-2022-22954

🗓️ 11 Apr 2022 19:37:39Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1337 Views🌐 WEB

VMware Workspace ONE Access and Identity Manager remote code execution vulnerabilit

Reporter	Title	Published	Views	Family All 79
GithubExploit	Exploit for Code Injection in Vmware Identity_Manager	3 Jun 202208:51	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Identity_Manager	15 Apr 202219:26	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Identity_Manager	11 Apr 202223:21	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Identity_Manager	1 Jun 202219:33	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Identity_Manager	3 Jun 202209:17	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Identity_Manager	11 Apr 202213:59	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Identity_Manager	13 Apr 202208:52	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Identity_Manager	14 Apr 202223:38	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Identity_Manager	12 Apr 202204:14	–	githubexploit
GithubExploit	Exploit for Code Injection in Vmware Identity_Manager	9 Oct 202010:14	–	githubexploit

NVD

Node

vmware identity_managerMatch3.3.3

vmware identity_managerMatch3.3.4

vmware identity_managerMatch3.3.5

vmware identity_managerMatch3.3.6

vmware vrealize_automationMatch7.6

vmware workspace_one_accessMatch20.10.0.0

vmware workspace_one_accessMatch20.10.0.1

vmware workspace_one_accessMatch21.08.0.0

vmware workspace_one_accessMatch21.08.0.1

AND

linux linux_kernelMatch-

Node

vmware cloud_foundationRange4.0–4.3.1

vmware vrealize_suite_lifecycle_managerRange8.0–8.2

[
  {
    "product": "VMware Workspace ONE Access and Identity Manager",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3."
      }
    ]
  }
]

Source	Link
vmware	www.vmware.com/security/advisories/VMSA-2022-0011.html
packetstormsecurity	www.packetstormsecurity.com/files/166935/VMware-Workspace-ONE-Access-Template-Injection-Command-Execution.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
deviceType	query param	/catalog-portal/ui	Server-side template injection via Freemarker Execute in SSTI leading to remote code execution.	CWE-94
deviceUdid	query param	/catalog-portal/ui	Server-side template injection via Freemarker Execute in SSTI leading to remote code execution.	CWE-94