imPC@ndo IT

Tracker / CVE-2022-31656

CVE-2022-31656

Critical 9.8

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.

Affected products and versions

vmware access_connector
vmware identity_manager
vmware identity_manager_connector
vmware one_access

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References