CVE-2022-31656

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.

Affected

VMware Workspace ONE Access, Identity Manager and vRealize Automation

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

24.34% chance of exploitation in the next 30 days, 98th percentile

Nuclei

critical · CWE-287

Published

2022-08-05

Updated

2024-08-03

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31656.yaml

Security advisories

• https://www.vmware.com/security/advisories/VMSA-2022-0021.html

References

• CVE Record
• NVD entry