CVE-2022-31659

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution...

CVE-2022-31659

Affected product: VMware Workspace ONE Access and Identity Manager. Vulnerabilities CVE-2022-31659 (SQL injection RCE) and related CVEs exist; CVE-2022-31656 (authentication bypass) enables prerequisites for RCE. The CVSS base vector indicates Network attack, Low complexity, Privileges Required: ...

CVE-2022-31663

Summary: CVE-2022-31663 affects VMware Workspace ONE Access, Identity Manager and vRealize Automation. The issue is a reflected cross-site scripting (XSS) vulnerability caused by improper user input sanitization, allowing a malicious actor with some user interaction to inject JavaScript into a ta...

CVE-2022-31664

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'...

CVE-2022-31664

CVE-2022-31664 affects VMware Workspace ONE Access, Identity Manager, and vRealize Automation. The issue is a local privilege escalation that can allow a malicious actor with local access to gain root privileges. The description in the sources consistently states a privilege-escalation flaw witho...

CVE-2022-31665

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution...

CVE-2022-31665

CVE-2022-31665 affects VMware Workspace ONE Access, Identity Manager, and vRealize Automation. The issue is a JDBC injection leading to remote code execution (RCE) , exploitable by a user with administrator and network access to trigger code execution. The vulnerability is documented alongside ot...

CVE-2022-31660

VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'...

CVE-2022-31660

VMware Workspace ONE Access, Identity Manager and vRealize Automation are affected by a local privilege-escalation flaw (CVE-2022-31660). An attacker with local access can escalate to root by modifying a file and restarting the vmware-certproxy service, which is invoked with sudo without a passwo...

CVE-2022-31662

Summary (CVE-2022-31662): VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation are affected by a path traversal vulnerability. A malicious actor with network access may be able to read arbitrary files on the system. The issue is detailed in the VMware VMSA-2022-0021 a...

多款VMware产品安全漏洞

VMware vRealize Automation and others are products of VMware, Inc. vRealize Automation is a management tool that provides self-service, supervised multi-cloud automation. vMware Workspace One Access is a centralized management console that enables you to manage users and groups, set and manage...

多款VMware产品安全漏洞

VMware vRealize Automation and others are products of VMware, Inc. vRealize Automation is a management tool that provides self-service, supervised multi-cloud automation. vMware Workspace One Access is a centralized management console that enables you to manage users and groups, set and manage...

VMware Workspace One Access和VMware Identity Manager SQL注入漏洞

VMware Workspace One Access and VMware Identity Manager are both products of VMware, Inc. of the U.S.A. VMware Workspace One Access is a centralized management console through which you can manage users and groups, set and manage authentication and access policies, and as well as add resources to...

多款VMware产品注入漏洞

VMware vRealize Automation and others are products of VMware, Inc. vRealize Automation is a management tool that provides self-service, supervised multi-cloud automation. vMware Workspace One Access is a centralized management console that enables you to manage users and groups, set and manage...

VMware Workspace One Access和VMware Identity Manager 输入验证错误漏洞

VMware Workspace One Access and VMware Identity Manager are both products of VMware, Inc.VMware Workspace One Access is a centralized management console that enables you to manage users and groups, set and manage authentication and access policies, and add resources to a directory and manage...

多款VMware产品路径遍历漏洞

VMware vRealize Automation and others are products of VMware, Inc. vRealize Automation is a management tool that provides self-service, supervised multi-cloud automation. vMware Workspace One Access is a centralized management console that enables you to manage users and groups, set and manage...

多款VMware产品注入漏洞

VMware vRealize Automation and others are products of VMware, Inc. vRealize Automation is a management tool that provides self-service, supervised multi-cloud automation. vMware Workspace One Access is a centralized management console that enables you to manage users and groups, set and manage...

多款VMware产品授权问题漏洞

VMware vRealize Automation and others are products of VMware, Inc. vRealize Automation is a management tool that provides self-service, supervised multi-cloud automation. vMware Workspace One Access is a centralized management console that enables you to manage users and groups, set and manage...

多款VMware产品跨站脚本漏洞

VMware vRealize Automation and others are products of VMware, Inc. vRealize Automation is a management tool that provides self-service, supervised multi-cloud automation. vMware Workspace One Access is a centralized management console that enables you to manage users and groups, set and manage...

The vulnerability of the user interface of the VMware Workspace One Access application management platform, the administration consoles of VMware Identity Manager (vIDM), and the virtual infrastructure management tools of VMware vRealize Automation relates to the possibility of bypassing authentication processes, allowing attackers to increase their privileges.

The vulnerability of the user interface of the VMware Workspace One Access application management platform, as well as the administration consoles of VMware Identity Manager vIDM, and the virtual infrastructure management tool VMware vRealize Automation, is related to the possibility of bypassing...