CVE-2022-31657

VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an arbitrary domain...

CVE-2022-31656

CVE-2022-31656 affects VMware Workspace ONE Access, Identity Manager, and vRealize Automation. The vulnerability is an authentication bypass that allows a remote attacker with network access to the UI to obtain administrative access without authentication. Base CVSS v3.1 score is 9.8 (CRITICAL) w...

CVE-2022-31658

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution...

CVE-2022-31658

Summary (CVE-2022-31658) VMware Workspace ONE Access, Identity Manager, and vRealize Automation are affected by a remote code execution vulnerability that an attacker with administrator and network access can trigger. The issue is listed with CVSSv3.1: Network attack vector, low attack complexity...

CVE-2022-31661

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor with local access can escalate privileges to 'root'...

CVE-2022-31661

CVE-2022-31661 affects VMware Workspace ONE Access, Identity Manager and vRealize Automation. It is a local privilege escalation vulnerability where a user with local access (notably the horizon user) can escalate privileges to root. Public writeups describe two related LPE issues in the same fam...

CVE-2022-31659

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution...

CVE-2022-31659

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution...

CVE-2022-31659

Affected product: VMware Workspace ONE Access and Identity Manager. Vulnerabilities CVE-2022-31659 (SQL injection RCE) and related CVEs exist; CVE-2022-31656 (authentication bypass) enables prerequisites for RCE. The CVSS base vector indicates Network attack, Low complexity, Privileges Required: ...

CVE-2022-31663

Summary: CVE-2022-31663 affects VMware Workspace ONE Access, Identity Manager and vRealize Automation. The issue is a reflected cross-site scripting (XSS) vulnerability caused by improper user input sanitization, allowing a malicious actor with some user interaction to inject JavaScript into a ta...

CVE-2022-31664

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'...

CVE-2022-31664

CVE-2022-31664 affects VMware Workspace ONE Access, Identity Manager, and vRealize Automation. The issue is a local privilege escalation that can allow a malicious actor with local access to gain root privileges. The description in the sources consistently states a privilege-escalation flaw witho...

CVE-2022-31665

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution...

CVE-2022-31665

CVE-2022-31665 affects VMware Workspace ONE Access, Identity Manager, and vRealize Automation. The issue is a JDBC injection leading to remote code execution (RCE) , exploitable by a user with administrator and network access to trigger code execution. The vulnerability is documented alongside ot...

CVE-2022-31660

VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'...

CVE-2022-31660

VMware Workspace ONE Access, Identity Manager and vRealize Automation are affected by a local privilege-escalation flaw (CVE-2022-31660). An attacker with local access can escalate to root by modifying a file and restarting the vmware-certproxy service, which is invoked with sudo without a passwo...

CVE-2022-31662

Summary (CVE-2022-31662): VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation are affected by a path traversal vulnerability. A malicious actor with network access may be able to read arbitrary files on the system. The issue is detailed in the VMware VMSA-2022-0021 a...

多款VMware产品安全漏洞

VMware vRealize Automation and others are products of VMware, Inc. vRealize Automation is a management tool that provides self-service, supervised multi-cloud automation. vMware Workspace One Access is a centralized management console that enables you to manage users and groups, set and manage...

多款VMware产品安全漏洞

VMware vRealize Automation and others are products of VMware, Inc. vRealize Automation is a management tool that provides self-service, supervised multi-cloud automation. vMware Workspace One Access is a centralized management console that enables you to manage users and groups, set and manage...

VMware Workspace One Access和VMware Identity Manager SQL注入漏洞

VMware Workspace One Access and VMware Identity Manager are both products of VMware, Inc. of the U.S.A. VMware Workspace One Access is a centralized management console through which you can manage users and groups, set and manage authentication and access policies, and as well as add resources to...