VMWare Workspace One Access Authentication Bypass (CVE-2022-31656)

An authentication bypass vulnerability exists in VMWare Workspace One Access. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information and gain unauthorized access to the affected system...

What we know about VMWare CVE-2022–31656 and CVE-2022–31659

Takeaways: VMWare Workspace ONE vulnerabilities CVE-2022-31656 and CVE-2022-31659 work in tandem to allow a remote attacker with network access to conduct remote code execution on the server. Imperva Threat Research has seen a sharp rise in attacks since a POC was published on August 9, mostly...

VMware Workspace One Access / VMware Identity Manager Multiple Vulnerabilities (VMSA-2022-0021)

The VMware Workspace One Access formerly VMware Identity Manager application running on the remote host is affected by the following vulnerabilities: - An authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain...

VMWare Urges Users to Patch Critical Authentication Bypass Bug

VMware and experts alike are urging users to patch multiple products affected by a critical authentication bypass vulnerability that can allow an attacker to gain administrative access to a system as well as exploit other flaws. The bug—tracked as CVE-2022-31656—earned a rating of 9.8 on the CVSS...

CVE-2022-31656

creationtimestamp| type| source ---|---|--- 2022-08-03 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=846 2022-08-03 10:17:56+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus13/2022 2022-08-03 11:22:13+00:00| published-proof-of-concept|...

VMware Releases Security Updates

VMware has released security updates to address multiple vulnerabilities in VMware’s Workspace ONE Access, Access Connector, Identity Manager, Identity Manager Connector, and vRealize Automation. A remote attacker could exploit some of these vulnerabilities to take control of an affected system...