Server side request forgery (ssrf)

2021-12-1717:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.758 High

EPSS

Percentile

98.2%

JSON

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.

CPENameOperatorVersion
workspace_one_uem_consolege20.0.8.0
workspace_one_uem_consolelt20.0.8.36
workspace_one_uem_consolege21.5.0.0
workspace_one_uem_consolelt21.5.0.37
workspace_one_uem_consolege21.2.0.0
workspace_one_uem_consolelt21.2.0.27
workspace_one_uem_consolege20.11.0.0
workspace_one_uem_consolelt20.11.0.40

Name	Operator	Version
workspace_one_uem_console	ge	20.0.8.0
workspace_one_uem_console	lt	20.0.8.36
workspace_one_uem_console	ge	21.5.0.0
workspace_one_uem_console	lt	21.5.0.37
workspace_one_uem_console	ge	21.2.0.0
workspace_one_uem_console	lt	21.2.0.27
workspace_one_uem_console	ge	20.11.0.0
workspace_one_uem_console	lt	20.11.0.40