15037 matches found
CVE-2022-22960
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'...
CVE-2022-22960
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'...
CVE-2022-22956
CVE-2022-22956 affects VMware Workspace ONE Access. The vulnerability is an authentication bypass in the OAuth2 ACS/OAuth2TokenResourceController layer, created by exposed endpoints that let a remote attacker bypass authentication and perform operations. It is part of a duo with CVE-2022-22955. T...
CVE-2022-22960
CVE-2022-22960 is a VMware privilege-escalation vulnerability in Workspace ONE Access, Identity Manager, and vRealize Automation caused by improper permissions in support scripts. A local attacker can escalate to root on affected systems. Technical details indicate affected products include VMwar...
CVE-2022-22957
Summary (CVE-2022-22957 / CVE-2022-22958): VMware Workspace ONE Access, Identity Manager and vRealize Automation are affected by remote code execution vulnerabilities. The root cause is deserialization of untrusted data via a malicious JDBC URI in the DBConnectionCheckController (CVE-2022-22957) ...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 PoC - VMware Workspace ONE Access Freemarker Se...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 This package detects a subset of CVE-2022-229...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954-Testi CVE-2022-22954 Açığı test etme VMware Wo...
Exploit for Code Injection in Vmware Identity_Manager
VMware-CVE-2022-22954 VMware CVE-2022-22954 Workspace ONE A...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 Vulnerability Description Workspace ONE Acce...
VMware Horizon Client Privilege Escalation
The vulnerability of the client of the VMware Horizon Client for Linux virtualization system relates to the tracking of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in supporting products of Azure. A malicious party could potentially exploit them to appropriate elevated privileges and gain access gain access to sensitive data. The vulnerabilities in Azure Site Recovery are located specifically in the VMWare-to-Azure and...
VMSA-2022-0013:VMware Cloud Director update addresses remote code execution vulnerability
Advisory ID: VMSA-2022-0013 CVSSv3 Range: 9.1 Issue Date:2022-04-14 Updated On: 2022-04-14 Initial Advisory CVEs: CVE-2022-22966 Synopsis: VMware Cloud Director update addresses remote code execution vulnerability CVE-2022-22966 RSS Feed Download PDF Download Text File Share this page on social...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 Attention Please use this at your own ris...
CVE-2022-22954
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution...
CVE-2022-22962
VMware Horizon Agent for Linux prior to 22.x contains a local privilege escalation as a user is able to change the default shared folder location due to a vulnerable symbolic link. Successful exploitation can result in linking to a root owned file...
CVE-2022-22954
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution...
CVE-2022-22964
VMware Horizon Agent for Linux prior to 22.x contains a local privilege escalation that allows a user to escalate to root due to a vulnerable configuration file...