The vulnerability of the VMware Identity Manager (vIDM), Workspace ONE Access, Cloud Foundation, and vRealize Suite Lifecycle Manager lies in the transmission of data through an unprotected primary channel, allowing attackers to circumvent existing security restrictions.

The vulnerability of the VMware Identity Manager vIDM, Workspace ONE Access, Cloud Foundation, and vRealize Suite Lifecycle Manager lies in the transmission of data through an unprotected primary channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security...

The vulnerabilities of the VMware Identity Manager (vIDM), vRealize Automation, Workspace ONE Access, Cloud Foundation, and vRealize Suite Lifecycle Manager software are related to insufficient validation of incoming requests. This allows attackers to execute SSRF attacks.

The vulnerabilities of VMware Identity Manager vIDM, vRealize Automation, Workspace ONE Access, Cloud Foundation, and vRealize Suite Lifecycle Manager are related to insufficient validation of incoming requests. Exploiting these vulnerabilities allows a malicious actor to execute an SSRF attack b...

VMware Workspace One Access / VMware Identity Manager Command Injection Vulnerability (VMSA-2020-0027)

The VMware Workspace One Access formerly VMware Identity Manager application running on the remote host is affected by a unspecified command injection vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version. C Tenable...

Exploit for Code Injection in Vmware Identity_Manager

VMware-CVE-2022-22954-POC Note: This POC is for educatio...

CVE-2016-5334

VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors...

CVE-2016-5334

VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors...

CVE-2016-5334: Exposure of Resource to Wrong Sphere

VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors...

VMware Identity Manager and vRealize Automation Information Disclosure Vulnerability

VMware Identity Manager and vRealize Automation are both VMware products. vMware Identity Manager is an Identity-as-a-Service IDaaS product that provides application provisioning, self-service catalogs, and Single Sign-On SSO for SaaS, Web, Cloud, and native mobile applications. vMware vRealize...

CVE-2016-5335

VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors...

CVE-2016-5335: Undefined Security Weakness

VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors...

VMware Identity Manager and vRealize Automation Local Elevation of Privilege Vulnerability

VMware Identity Manager and vRealize Automation are both products of VMware, Inc. The former is an Identity-as-a-Service IDaaS product that provides application provisioning, self-service catalogs, and single sign-on SSO for SaaS, web, cloud, and native mobile applications, while the latter is a...