Lucene search

[email protected]CVE-2022-31662

HistoryAug 05, 2022 - 4:15 p.m.

CVE-2022-31662

2022-08-0516:15:12

CWE-22

[email protected]

web.nvd.nist.gov

cve-2022-31662

vmware

workspace one access

identity manager

connectors

vrealize automation

path traversal vulnerability

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.9%

JSON

VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to access arbitrary files.

Affected configurations

NVD

Node

vmwareidentity_managerMatch3.3.4

vmwareidentity_managerMatch3.3.5

vmwareidentity_managerMatch3.3.6

vmwareone_accessMatch21.08.0.0

vmwareone_accessMatch21.08.0.1

AND

linuxlinux_kernelMatch-

Node

vmwareaccess_connectorMatch21.08.0.0

vmwareaccess_connectorMatch21.08.0.1

vmwareaccess_connectorMatch22.05

vmwareidentity_manager_connectorMatch3.3.4

vmwareidentity_manager_connectorMatch3.3.5

vmwareidentity_manager_connectorMatch3.3.6

vmwareidentity_manager_connectorMatch19.03.0.1

AND

microsoftwindowsMatch-

CPENameOperatorVersion
vmware:identity_managervmware identity managereq3.3.4
vmware:identity_managervmware identity managereq3.3.5
vmware:identity_managervmware identity managereq3.3.6
vmware:one_accessvmware one accesseq21.08.0.0
vmware:one_accessvmware one accesseq21.08.0.1

CPE	Name	Operator	Version
vmware:identity_manager	vmware identity manager	eq	3.3.4
vmware:identity_manager	vmware identity manager	eq	3.3.5
vmware:identity_manager	vmware identity manager	eq	3.3.6
vmware:one_access	vmware one access	eq	21.08.0.0
vmware:one_access	vmware one access	eq	21.08.0.1

CNA Affected

[
  {
    "product": "VMware Workspace ONE Access, Access Connector, Identity Manager, vIDM Connector and vRealize Automation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Workspace One Access (21.08.0.1 & 21.08.0.0), Access Connector (21.08.0.1, 21.08.0.0, 22.05), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), vIDM Connector (3.3.6, 3.3.5, 3.3.4), and vRealize Automation 7.6"
      }
    ]
  }
]