CVE-2022-31685

2022-11-0900:00:00

vmware

www.cve.org

vmware

workspace one assist

authentication bypass

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

53.0%

JSON

VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "VMware Workspace ONE Assist",
    "versions": [
      {
        "version": "VMware Workspace ONE Assist prior to 22.10",
        "status": "affected"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2022-0028.html