critical9.8
CVE-2022-31689
VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability.
Impact
VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authenticate to the application using that token.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Workspace One Assist | before 22.10 |