Lucene search

[email protected]CVE-2022-31701

HistoryDec 14, 2022 - 7:15 p.m.

CVE-2022-31701

2022-12-1419:15:00

CWE-306

[email protected]

web.nvd.nist.gov

cve-2022-31701

vmware

workspace one access

identity manager

broken authentication

vulnerability

nvd

cvssv3

5.3

moderate severity

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

6 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

29.9%

JSON

VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.

CPENameOperatorVersion
vmware:accessvmware accesseq21.08.0.1
vmware:accessvmware accesseq21.08.0.0
vmware:accessvmware accesseq22.09.0.0
vmware:cloud_foundationvmware cloud foundationeq*
vmware:identity_manager_connectorvmware identity manager connectoreq3.3.6

CPE	Name	Operator	Version
vmware:access	vmware access	eq	21.08.0.1
vmware:access	vmware access	eq	21.08.0.0
vmware:access	vmware access	eq	22.09.0.0
vmware:cloud_foundation	vmware cloud foundation	eq	*
vmware:identity_manager_connector	vmware identity manager connector	eq	3.3.6

References

www.vmware.com/security/advisories/VMSA-2022-0032.html

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

6 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

29.9%

JSON

Related for CVE-2022-31701

prion1 cvelist1 vmware1 nessus1