NetSight
high7.8

CVE-2022-31664

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability.

Impact

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.

Affected products

VendorProductAffected versions
VmwareIdentity Manager
Versions 3.3.4, 3.3.5, 3.3.6
VmwareOne Access
Versions 21.08.0.0, 21.08.0.1
VmwareAccess Connector
Versions 21.08.0.0, 21.08.0.1, 22.05
VmwareIdentity Manager Connector
Versions 3.3.4, 3.3.5, 3.3.6, 19.03.0.1

References