NetSight
high7.8

CVE-2022-31660

VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability.

Impact

VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.

Affected products

VendorProductAffected versions
VmwareIdentity Manager
Versions 3.3.4, 3.3.5, 3.3.6
VmwareOne Access
Versions 21.08.0.0, 21.08.0.1
VmwareAccess Connector
Versions 21.08.0.0, 21.08.0.1, 22.05
VmwareIdentity Manager Connector
Versions 3.3.4, 3.3.5, 3.3.6, 19.03.0.1

References