15037 matches found
CVE-2022-22955: Undefined Security Weakness
VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework...
CVE-2022-22961: Exposure of Sensitive Information to an Unauthorized Actor
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A malicious actor with remote access may leak the hostname of the target system. Successful exploitation of this issue can lead to targeting...
CVE-2022-22956: Improper Authentication
VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework...
VMware Deserialization Code Execution
The vulnerabilities of the VMware Workspace ONE Access application management platform, the VMware vRealize Automation virtual infrastructure management tool, the VMware Identity Manager vIDM administration consoles, the VMware Cloud Foundation virtualization platform, and the vRealize Suite...
CVE-2022-22956
CVE-2022-22956 affects VMware Workspace ONE Access. The vulnerability is an authentication bypass in the OAuth2 ACS/OAuth2TokenResourceController layer, created by exposed endpoints that let a remote attacker bypass authentication and perform operations. It is part of a duo with CVE-2022-22955. T...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 PoC - VMware Workspace ONE Access Freemarker Se...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 This package detects a subset of CVE-2022-229...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954-Testi CVE-2022-22954 Açığı test etme VMware Wo...
Exploit for Code Injection in Vmware Identity_Manager
VMware-CVE-2022-22954 VMware CVE-2022-22954 Workspace ONE A...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 Vulnerability Description Workspace ONE Acce...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in supporting products of Azure. A malicious party could potentially exploit them to appropriate elevated privileges and gain access gain access to sensitive data. The vulnerabilities in Azure Site Recovery are located specifically in the VMWare-to-Azure and...
VMSA-2022-0013:VMware Cloud Director update addresses remote code execution vulnerability
Advisory ID: VMSA-2022-0013 CVSSv3 Range: 9.1 Issue Date:2022-04-14 Updated On: 2022-04-14 Initial Advisory CVEs: CVE-2022-22966 Synopsis: VMware Cloud Director update addresses remote code execution vulnerability CVE-2022-22966 RSS Feed Download PDF Download Text File Share this page on social...
VMware Horizon Client Privilege Escalation
The vulnerability of the client of the VMware Horizon Client for Linux virtualization system relates to the tracking of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 Attention Please use this at your own ris...
CVE-2022-22954
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution...
CVE-2022-22964
VMware Horizon Agent for Linux prior to 22.x contains a local privilege escalation that allows a user to escalate to root due to a vulnerable configuration file...
CVE-2022-22954
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution...
CVE-2022-22962
VMware Horizon Agent for Linux prior to 22.x contains a local privilege escalation as a user is able to change the default shared folder location due to a vulnerable symbolic link. Successful exploitation can result in linking to a root owned file...