CVE-2022-22960

🗓️ 13 Apr 2022 00:00:00Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 1206 Views🌐 WEB

VMware Workspace ONE Access, Identity Manager and vRealize Automation privilege escalation vulnerabilit

Reporter	Title	Published	Views	Family All 42
0day.today	VMware Workspace ONE Remote Code Execution Exploit	18 Apr 202300:00	–	zdt
0day.today	VMware Workspace ONE Access Privilege Escalation Exploit	19 Apr 202300:00	–	zdt
GithubExploit	Exploit for Code Injection in Vmware Identity_Manager	1 Jun 202219:33	–	githubexploit
ICS	Threat Actors Chaining Unpatched VMware Vulnerabilities for Full System Control	2 Jun 202212:00	–	ics
ICS	Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems	18 Jul 202212:00	–	ics
ICS	2022 Top Routinely Exploited Vulnerabilities	3 Aug 202312:00	–	ics
ATTACKERKB	CVE-2022-22954	11 Apr 202200:00	–	attackerkb
ATTACKERKB	CVE-2022-22960	13 Apr 202200:00	–	attackerkb
BDU FSTEC	The vulnerability of the VMware Workspace ONE Access application management platform, the VMware Cloud Foundation virtualization platform, the VMware vRealize Automation virtual infrastructure management tool, the vRealize Suite Lifecycle Manager application lifecycle management software, and the VMware Identity Manager (vIDM) administration console—all of which are related to errors in the use of standard permissions—allow a perpetrator to increase their privileges.	8 Apr 202200:00	–	bdu_fstec
Circl	CVE-2022-22960	1 May 202221:40	–	circl

NVD

Node

vmware cloud_foundationRange3.0–5.0

vmware identity_managerMatch3.3.3

vmware identity_managerMatch3.3.4

vmware identity_managerMatch3.3.5

vmware identity_managerMatch3.3.6

vmware vrealize_automationMatch7.6

vmware vrealize_suite_lifecycle_managerRange8.0–9.0

vmware workspace_one_accessMatch20.10.0.0

vmware workspace_one_accessMatch20.10.0.1

vmware workspace_one_accessMatch21.08.0.0

vmware workspace_one_accessMatch21.08.0.1

AND

linux linux_kernelMatch-

[
  {
    "vendor": "n/a",
    "product": "VMware Workspace ONE Access, Identity Manager and vRealize Automation",
    "versions": [
      {
        "version": "Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3. vRealize Automation 7.6.",
        "status": "affected"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/171918/VMware-Workspace-ONE-Remote-Code-Execution.html
packetstormsecurity	www.packetstormsecurity.com/files/171918/Mware-Workspace-ONE-Remote-Code-Execution.html
packetstormsecurity	www.packetstormsecurity.com/files/171935/VMware-Workspace-ONE-Access-Privilege-Escalation.html
vmware	www.vmware.com/security/advisories/VMSA-2022-0011.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
gatherConfig.hzn	path	/gatherConfig.hzn	Privilege escalation due to improper permissions in gatherConfig.hzn script allowing root compromise	CWE-732

17 Jun 2026 04:29Current

8.7High risk

Vulners AI Score8.7

CVSS 27.2

CVSS 3.17.8

EPSS0.37171

SSVC