← Back

CVE-2022-22973

nvd nist
Published: May 20, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.

Affected (39)

Vmware
4 products
Identity Manager
Workspace One Access
Cloud Foundation
Vrealize Suite Lifecycle Manager
Configuration A
8 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Vmware
Identity Manager
Version 3.3.3
Identity Manager
Version 3.3.4
Identity Manager
Version 3.3.5
Identity Manager
Version 3.3.6
Vmware
Workspace One Access
Version 20.10.0.0
Workspace One Access
Version 20.10.0.1
Workspace One Access
Version 21.08.0.0
Workspace One Access
Version 21.08.0.1
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Configuration B
31 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Cloud Foundation
Version 4.0.1
Cloud Foundation
Version 4.0
Cloud Foundation
Version 4.1.0.1
Cloud Foundation
Version 4.1
Cloud Foundation
Version 4.2.1
Cloud Foundation
Version 4.2
Cloud Foundation
Version 4.3.1
Cloud Foundation
Version 4.3
Vmware
Vrealize Suite Lifecycle Manager
Version 8.0.1
Vrealize Suite Lifecycle Manager
Version 8.0
Vrealize Suite Lifecycle Manager
Version 8.1
Vrealize Suite Lifecycle Manager
Version 8.2
Vrealize Suite Lifecycle Manager
Version 8.2 patch1
Vrealize Suite Lifecycle Manager
Version 8.2 patch2
Vrealize Suite Lifecycle Manager
Version 8.2 patch3
Vrealize Suite Lifecycle Manager
Version 8.3
Vrealize Suite Lifecycle Manager
Version 8.3 patch1
Vrealize Suite Lifecycle Manager
Version 8.3 patch2
Vrealize Suite Lifecycle Manager
Version 8.3 patch3
Vrealize Suite Lifecycle Manager
Version 8.4.1
Vrealize Suite Lifecycle Manager
Version 8.4.1 patch1
Vrealize Suite Lifecycle Manager
Version 8.4.1 patch2
Vrealize Suite Lifecycle Manager
Version 8.4.1 patch3
Vrealize Suite Lifecycle Manager
Version 8.4
Vrealize Suite Lifecycle Manager
Version 8.4 patch1
Vrealize Suite Lifecycle Manager
Version 8.6.1
Vrealize Suite Lifecycle Manager
Version 8.6.2
Vrealize Suite Lifecycle Manager
Version 8.6
Vrealize Suite Lifecycle Manager
Version 8.6 patch1
Vrealize Suite Lifecycle Manager
Version 8.7
Vrealize Suite Lifecycle Manager
Version 8.8

References (2)

Source: security@vmware.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.