Lucene search

[email protected]CVE-2022-31662

HistoryAug 05, 2022 - 4:15 p.m.

CVE-2022-31662

2022-08-0516:15:00

CWE-22

[email protected]

web.nvd.nist.gov

cve-2022-31662

vmware

workspace one access

identity manager

connectors

vrealize automation

path traversal vulnerability

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

46.0%

JSON

VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to access arbitrary files.

CPENameOperatorVersion
vmware:identity_managervmware identity managereq3.3.4
vmware:identity_managervmware identity managereq3.3.5
vmware:identity_managervmware identity managereq3.3.6
vmware:one_accessvmware one accesseq21.08.0.0
vmware:one_accessvmware one accesseq21.08.0.1
vmware:access_connectorvmware access connectoreq21.08.0.0
vmware:access_connectorvmware access connectoreq21.08.0.1
vmware:access_connectorvmware access connectoreq22.05
vmware:identity_manager_connectorvmware identity manager connectoreq3.3.4
vmware:identity_manager_connectorvmware identity manager connectoreq3.3.5

CPE	Name	Operator	Version
vmware:identity_manager	vmware identity manager	eq	3.3.4
vmware:identity_manager	vmware identity manager	eq	3.3.5
vmware:identity_manager	vmware identity manager	eq	3.3.6
vmware:one_access	vmware one access	eq	21.08.0.0
vmware:one_access	vmware one access	eq	21.08.0.1
vmware:access_connector	vmware access connector	eq	21.08.0.0
vmware:access_connector	vmware access connector	eq	21.08.0.1
vmware:access_connector	vmware access connector	eq	22.05
vmware:identity_manager_connector	vmware identity manager connector	eq	3.3.4
vmware:identity_manager_connector	vmware identity manager connector	eq	3.3.5

Rows per page:

1-10 of 121

References

www.vmware.com/security/advisories/VMSA-2022-0021.html

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

46.0%

JSON

Related for CVE-2022-31662

prion1 nessus1 threatpost1 thn1 vmware2