← Back

CVE-2022-22972

nvd nistnuclei
Published: May 20, 2022Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.

Affected (60)

Vmware
5 products
Identity Manager
Vrealize Automation
Workspace One Access
Cloud Foundation
Vrealize Suite Lifecycle Manager
Configuration A
9 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vmware
Identity Manager
Version 3.3.3
Identity Manager
Version 3.3.4
Identity Manager
Version 3.3.5
Identity Manager
Version 3.3.6
Vrealize Automation
Version 7.6
Vmware
Workspace One Access
Version 20.10.0.0
Workspace One Access
Version 20.10.0.1
Workspace One Access
Version 21.08.0.0
Workspace One Access
Version 21.08.0.1
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Configuration B
51 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Cloud Foundation
Version 3.0.1.1
Cloud Foundation
Version 3.0.1
Cloud Foundation
Version 3.0
Cloud Foundation
Version 3.10.1.1
Cloud Foundation
Version 3.10.1.2
Cloud Foundation
Version 3.10.1
Cloud Foundation
Version 3.10.2.1
Cloud Foundation
Version 3.10.2.2
Cloud Foundation
Version 3.10
Cloud Foundation
Version 3.11.0.1
Cloud Foundation
Version 3.11
Cloud Foundation
Version 3.5.1
Cloud Foundation
Version 3.5
Cloud Foundation
Version 3.7.1
Cloud Foundation
Version 3.7.2
Cloud Foundation
Version 3.7
Cloud Foundation
Version 3.8.1
Cloud Foundation
Version 3.8
Cloud Foundation
Version 3.9.1
Cloud Foundation
Version 3.9
Cloud Foundation
Version 4.0.1
Cloud Foundation
Version 4.0
Cloud Foundation
Version 4.1.0.1
Cloud Foundation
Version 4.1
Cloud Foundation
Version 4.2.1
Cloud Foundation
Version 4.2
Cloud Foundation
Version 4.3.1
Cloud Foundation
Version 4.3
Vmware
Vrealize Suite Lifecycle Manager
Version 8.0.1
Vrealize Suite Lifecycle Manager
Version 8.0
Vrealize Suite Lifecycle Manager
Version 8.1
Vrealize Suite Lifecycle Manager
Version 8.2
Vrealize Suite Lifecycle Manager
Version 8.2 patch1
Vrealize Suite Lifecycle Manager
Version 8.2 patch2
Vrealize Suite Lifecycle Manager
Version 8.2 patch3
Vrealize Suite Lifecycle Manager
Version 8.3
Vrealize Suite Lifecycle Manager
Version 8.3 patch1
Vrealize Suite Lifecycle Manager
Version 8.3 patch2
Vrealize Suite Lifecycle Manager
Version 8.3 patch3
Vrealize Suite Lifecycle Manager
Version 8.4.1
Vrealize Suite Lifecycle Manager
Version 8.4.1 patch1
Vrealize Suite Lifecycle Manager
Version 8.4.1 patch2
Vrealize Suite Lifecycle Manager
Version 8.4.1 patch3
Vrealize Suite Lifecycle Manager
Version 8.4
Vrealize Suite Lifecycle Manager
Version 8.4 patch1
Vrealize Suite Lifecycle Manager
Version 8.6.1
Vrealize Suite Lifecycle Manager
Version 8.6.2
Vrealize Suite Lifecycle Manager
Version 8.6
Vrealize Suite Lifecycle Manager
Version 8.6 patch1
Vrealize Suite Lifecycle Manager
Version 8.7
Vrealize Suite Lifecycle Manager
Version 8.8

References (2)

Source: security@vmware.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.