← Back

CVE-2021-22003

nvd nist
Published: Aug 31, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute force the login endpoint, which may or may not be practical based on lockout policy configuration and password complexity for the target account.

Affected (16)

Vmware
4 products
Identity Manager
Workspace One Access
Cloud Foundation
Vrealize Suite Lifecycle Manager
Configuration A
7 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vmware
Identity Manager
Version 3.3.2
Identity Manager
Version 3.3.3
Identity Manager
Version 3.3.4
Identity Manager
Version 3.3.5
Vmware
Workspace One Access
Version 20.01
Workspace One Access
Version 20.10.01
Workspace One Access
Version 20.10
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Configuration B
9 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Cloud Foundation
Version 4.0.1
Cloud Foundation
Version 4.0
Cloud Foundation
Version 4.1.0.1
Cloud Foundation
Version 4.1
Cloud Foundation
Version 4.2.1
Vmware
Vrealize Suite Lifecycle Manager
Version 8.0.1
Vrealize Suite Lifecycle Manager
Version 8.0
Vrealize Suite Lifecycle Manager
Version 8.1
Vrealize Suite Lifecycle Manager
Version 8.2

Related CWEs

CWE-307
Improper Restriction of Excessive Authentication Attempts
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (2)

Source: security@vmware.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.