Session fixation

VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authenticate to the application using that token...

Improper access control

VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application...

CVE-2022-31688

creationtimestamp| type| source ---|---|--- 2022-11-09 10:09:43+00:00| seen| https://www.cert.at/de/warnungen/2022/11/kritische-sicherheitslucken-in-vmware-workspace-one-updates-verfugbar 2022-11-09 13:20:04+00:00| seen| https://t.me/truesecator/3679 2022-11-10 00:36:39+00:00| seen|...

CVE-2022-31689

creationtimestamp| type| source ---|---|--- 2022-11-09 10:09:43+00:00| seen| https://www.cert.at/de/warnungen/2022/11/kritische-sicherheitslucken-in-vmware-workspace-one-updates-verfugbar 2022-11-09 13:20:04+00:00| seen| https://t.me/truesecator/3679 2025-05-01 16:14:36+00:00| seen|...

VMware Warns of 3 New Critical Flaws Affecting Workspace ONE Assist Software

VMware has patched five security flaws affecting its Workspace ONE Assist solution, some of which could be exploited to bypass authentication and obtain elevated permissions. Topping the list are three critical vulnerabilities tracked as CVE-2022-31685, CVE-2022-31686, and CVE-2022-31687. All the...

CVE-2022-31686

creationtimestamp| type| source ---|---|--- 2022-11-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=914 2022-11-09 07:33:41+00:00| seen| https://t.me/thehackernews/2743 2022-11-09 10:09:43+00:00| seen|...

CVE-2022-31685

creationtimestamp| type| source ---|---|--- 2022-11-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=914 2022-11-09 07:33:41+00:00| seen| https://t.me/thehackernews/2743 2022-11-09 10:09:43+00:00| seen|...

CVE-2022-31689

VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authenticate to the application using that token...

CVE-2022-31685

VMware Workspace ONE Assist contains CVE-2022-31685, an authentication bypass vulnerability in versions prior to 22.10. Affected component: Workspace ONE Assist server. Root cause: authentication bypass allows a network-adjacent attacker to obtain administrative access without authenticating. Imp...

CVE-2022-31688

VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting XSS vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window...

VMware Releases Security Updates

VMware has released security updates to address multiple vulnerabilities in VMware Workspace ONE Assist. A remote attacker could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisory VMSA-2022-0028 a...

CVE-2022-31688

VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting XSS vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window...

CVE-2022-31687

VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application...

CVE-2022-31685

VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application...

CVE-2022-31686

CVE-2022-31686 affects VMware Workspace ONE Assist prior to version 22.10. The issue is a Broken Authentication Method that could allow an attacker with network access to obtain administrative privileges without authenticating to the application. Impact is described as high (admin access, full co...

VMware Workspace ONE Assist 授权问题漏洞

VMware Workspace ONE Assist is a real-time remote support solution from VMware, Inc. It allows VMware Workspace ONE UEM administrators to remotely access and troubleshoot devices in real-time while respecting end-user privacy. A security vulnerability exists in VMware Workspace ONE Assist prior t...

CVE-2022-31686

VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application...

CVE-2022-31685

VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application...

CVE-2022-31689

CVE-2022-31689 describes a session fixation flaw in VMware Workspace ONE Assist prior to version 22.10. A malicious actor with a valid session token could authenticate to the application using that token. Public documents confirm affected versions include 21.x and 22.x, with the issue fixed in 22...

CVE-2022-31687

VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application...