Lucene search

K
cve[email protected]CVE-2022-31662
HistoryAug 05, 2022 - 4:15 p.m.

CVE-2022-31662

2022-08-0516:15:12
CWE-22
web.nvd.nist.gov
53
3
cve-2022-31662
vmware
workspace one access
identity manager
connectors
vrealize automation
path traversal vulnerability
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.8%

VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to access arbitrary files.

Affected configurations

NVD
Node
vmwareidentity_managerMatch3.3.4
OR
vmwareidentity_managerMatch3.3.5
OR
vmwareidentity_managerMatch3.3.6
OR
vmwareone_accessMatch21.08.0.0
OR
vmwareone_accessMatch21.08.0.1
AND
linuxlinux_kernelMatch-
Node
vmwareaccess_connectorMatch21.08.0.0
OR
vmwareaccess_connectorMatch21.08.0.1
OR
vmwareaccess_connectorMatch22.05
OR
vmwareidentity_manager_connectorMatch3.3.4
OR
vmwareidentity_manager_connectorMatch3.3.5
OR
vmwareidentity_manager_connectorMatch3.3.6
OR
vmwareidentity_manager_connectorMatch19.03.0.1
AND
microsoftwindowsMatch-

CNA Affected

[
  {
    "product": "VMware Workspace ONE Access, Access Connector, Identity Manager, vIDM Connector and vRealize Automation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Workspace One Access (21.08.0.1 & 21.08.0.0), Access Connector (21.08.0.1, 21.08.0.0, 22.05), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), vIDM Connector (3.3.6, 3.3.5, 3.3.4), and vRealize Automation 7.6"
      }
    ]
  }
]

Social References

More

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.8%