CVE-2022-31656

🗓️ 05 Aug 2022 15:07:24Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 432 Views🌐 WEB

VMware Workspace ONE Access, Identity Manager and vRealize Automation authentication bypass vulnerability affecting local domain users

Reporter	Title	Published	Views	Family All 26
ATTACKERKB	CVE-2022-31656	5 Aug 202216:15	–	attackerkb
BDU FSTEC	The vulnerability of the user interface of the VMware Workspace One Access application management platform, the administration consoles of VMware Identity Manager (vIDM), and the virtual infrastructure management tools of VMware vRealize Automation relates to the possibility of bypassing authentication processes, allowing attackers to increase their privileges.	4 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-31656	3 Aug 202204:00	–	circl
CISA	VMware Releases Security Updates	3 Aug 202200:00	–	cisa
CNNVD	多款VMware产品授权问题漏洞	5 Aug 202200:00	–	cnnvd
Check Point Advisories	VMWare Workspace One Access Authentication Bypass (CVE-2022-31656)	30 Aug 202200:00	–	checkpoint_advisories
Cvelist	CVE-2022-31656	5 Aug 202215:07	–	cvelist
GithubExploit	Exploit for Path Traversal in Vmware Cloud_Foundation	4 Oct 202203:39	–	githubexploit
Hive Pro Threat Advisories	VMware products impacted by an authentication bypass vulnerability and other flaws	4 Aug 202211:47	–	hivepro
Imperva Blog	What we know about VMWare CVE-2022–31656 and CVE-2022–31659	10 Aug 202216:55	–	impervablog

NVD

Node

vmware identity_managerMatch3.3.4

vmware identity_managerMatch3.3.5

vmware identity_managerMatch3.3.6

vmware one_accessMatch21.08.0.0

vmware one_accessMatch21.08.0.1

AND

linux linux_kernelMatch-

Node

vmware access_connectorMatch21.08.0.0

vmware access_connectorMatch21.08.0.1

vmware access_connectorMatch22.05

vmware identity_manager_connectorMatch3.3.4

vmware identity_manager_connectorMatch3.3.5

vmware identity_manager_connectorMatch3.3.6

vmware identity_manager_connectorMatch19.03.0.1

AND

microsoft windowsMatch-

[
  {
    "product": "VMware Workspace ONE Access, Identity Manager and vRealize Automation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6"
      }
    ]
  }
]

Source	Link
vmware	www.vmware.com/security/advisories/VMSA-2022-0021.html

Parameter	Position	Path	Description	CWE
test.jsp	path	192.168.1.1/test.jsp	Exploit/upload webshell path referenced in the tool usage for CVE-2022-31656 context (execution/bypass workflows described in the document).	CVE-2022-31656

21 Nov 2024 07:05Current

9.1High risk

Vulners AI Score9.1

CVSS 3.19.8

EPSS0.80473

In Wild