What we know about VMWare CVE-2022–31656 and CVE-2022–31659

🗓️ 10 Aug 2022 16:55:48Reported by Gabi StapelType

VMWare Workspace ONE CVE-2022-31656 and CVE-2022-31659 enables remote code execution, leading to attacks on US and Singapore-based site

Reporter	Title	Published	Views	Family All 39
ATTACKERKB	CVE-2022-31656	5 Aug 202216:15	–	attackerkb
ATTACKERKB	CVE-2022-31659	5 Aug 202216:15	–	attackerkb
BDU FSTEC	The vulnerability of the user interface of the VMware Workspace One Access application management platform, the administration consoles of VMware Identity Manager (vIDM), and the virtual infrastructure management tools of VMware vRealize Automation relates to the possibility of bypassing authentication processes, allowing attackers to increase their privileges.	4 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VMware Workspace One Access application management platform, and the administration consoles of VMware Identity Manager (vIDM), stem from the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.	10 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-31656	3 Aug 202204:00	–	circl
Circl	CVE-2022-31659	3 Aug 202215:16	–	circl
CISA	VMware Releases Security Updates	3 Aug 202200:00	–	cisa
CNNVD	VMware Workspace One Access和VMware Identity Manager SQL注入漏洞	5 Aug 202200:00	–	cnnvd
CNNVD	多款VMware产品授权问题漏洞	5 Aug 202200:00	–	cnnvd
Check Point Advisories	VMWare Workspace One Access Authentication Bypass (CVE-2022-31656)	30 Aug 202200:00	–	checkpoint_advisories