high7.8
CVE-2022-22973
VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability.
Impact
VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Identity Manager | Versions 3.3.3, 3.3.4, 3.3.5, 3.3.6 |
| Vmware | Workspace One Access | Versions 20.10.0.0, 20.10.0.1, 21.08.0.0, 21.08.0.1 |
| Vmware | Cloud Foundation | Versions 4.0, 4.0.1, 4.1, 4.1.0.1, 4.2, 4.2.1 |
| Vmware | Vrealize Suite Lifecycle Manager | Versions 8.0, 8.0.1, 8.1, 8.2, 8.3, 8.4 |