CVE-2022-31659

2022-08-0515:06:41

vmware

www.cve.org

vmware

workspace one

identity manager

remote code execution

vulnerability

administrator access

network access

8.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.5%

JSON

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.

CNA Affected

[
  {
    "product": "VMware Workspace ONE Access, Identity Manager and vRealize Automation",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Workspace One Access (21.08.0.1 & 21.08.0.0), Identity Manager (vIDM) (3.3.6, 3.3.5 & 3.3.4), and vRealize Automation 7.6"
      }
    ]
  }
]