CVE-2022-31689

2022-11-0900:00:00

vmware

www.cve.org

vmware

workspace one assist

session fixation

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%

JSON

VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authenticate to the application using that token.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "VMware Workspace ONE Assist",
    "versions": [
      {
        "version": "VMware Workspace ONE Assist prior to 22.10",
        "status": "affected"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2022-0028.html