medium5.3
CVE-2022-22961
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information.
Impact
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability due to returning excess information. A malicious actor with remote access may leak the hostname of the target system. Successful exploitation of this issue can lead to targeting victims.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Cloud Foundation | from 3.0 before 5.0 |
| Vmware | Identity Manager | Versions 3.3.3, 3.3.4, 3.3.5, 3.3.6 |
| Vmware | Vrealize Automation | from 8.0 before 9.0 Version 7.6 |
| Vmware | Vrealize Suite Lifecycle Manager | from 8.0 before 9.0 |
| Vmware | Workspace One Access | Versions 20.10.0.0, 20.10.0.1, 21.08.0.0, 21.08.0.1 |