critical9.8
CVE-2022-31656
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users.
Impact
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Identity Manager | Versions 3.3.4, 3.3.5, 3.3.6 |
| Vmware | One Access | Versions 21.08.0.0, 21.08.0.1 |
| Vmware | Access Connector | Versions 21.08.0.0, 21.08.0.1, 22.05 |
| Vmware | Identity Manager Connector | Versions 3.3.4, 3.3.5, 3.3.6, 19.03.0.1 |