CVE-2021-22057

2021-12-2020:08:26

vmware

www.cve.org

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.3%

JSON

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass vulnerability. A malicious actor, who has successfully provided first-factor authentication, may be able to obtain second-factor authentication provided by VMware Verify.

CNA Affected

[
  {
    "product": "VMware Workspace ONE Access",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2021-0030.html