Design/Logic Flaw

2022-08-0516:15:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%

JSON

VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an arbitrary domain.

CPENameOperatorVersion
access_connectoreq21.08.0.0
access_connectoreq21.08.0.1
access_connectoreq22.05
identity_managereq3.3.4
identity_managereq3.3.5
identity_managereq3.3.6
identity_manager_connectoreq3.3.4
identity_manager_connectoreq3.3.5
identity_manager_connectoreq3.3.6
identity_manager_connectoreq19.03.0.1

Name	Operator	Version
access_connector	eq	21.08.0.0
access_connector	eq	21.08.0.1
access_connector	eq	22.05
identity_manager	eq	3.3.4
identity_manager	eq	3.3.5
identity_manager	eq	3.3.6
identity_manager_connector	eq	3.3.4
identity_manager_connector	eq	3.3.5
identity_manager_connector	eq	3.3.6
identity_manager_connector	eq	19.03.0.1