Cross site request forgery (csrf)

2022-04-1318:15:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

JSON

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability. A malicious actor can trick a user through a cross site request forgery to unintentionally validate a malicious JDBC URI.

CPENameOperatorVersion
cloud_foundationge3.0
cloud_foundationlt5.0
identity_managereq3.3.3
identity_managereq3.3.4
identity_managereq3.3.5
identity_managereq3.3.6
vrealize_automationge8.0
vrealize_automationlt9.0
vrealize_automationeq7.6
vrealize_suite_lifecycle_managerge8.0

Name	Operator	Version
cloud_foundation	ge	3.0
cloud_foundation	lt	5.0
identity_manager	eq	3.3.3
identity_manager	eq	3.3.4
identity_manager	eq	3.3.5
identity_manager	eq	3.3.6
vrealize_automation	ge	8.0
vrealize_automation	lt	9.0
vrealize_automation	eq	7.6
vrealize_suite_lifecycle_manager	ge	8.0