critical9.8
CVE-2022-22972
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users.
Impact
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Identity Manager | Versions 3.3.3, 3.3.4, 3.3.5, 3.3.6 |
| Vmware | Vrealize Automation | Version 7.6 |
| Vmware | Workspace One Access | Versions 20.10.0.0, 20.10.0.1, 21.08.0.0, 21.08.0.1 |
| Vmware | Cloud Foundation | Versions 3.0, 3.0.1, 3.0.1.1, 3.5, 3.5.1, 3.7 |
| Vmware | Vrealize Suite Lifecycle Manager | Versions 8.0, 8.0.1, 8.1, 8.2, 8.3, 8.4 |