CVE-2022-31656

2022-08-0515:07:24

vmware

www.cve.org

vmware

authentication bypass

local domain users

administrative access

network access

9.6 High

AI Score

Confidence

High

0.641 Medium

EPSS

Percentile

97.9%

JSON

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.

CNA Affected

[
  {
    "product": "VMware Workspace ONE Access, Identity Manager and vRealize Automation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6"
      }
    ]
  }
]