PT-2022-20895 · Vmware · Vmware Identity Manager+1

Steven Seeley · Published 2022-12-14 · Updated 2023-03-04 · CVE-2022-31700

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware Workspace ONE Access and Identity Manager (affected versions not specified)

Description The issue is an authenticated remote code execution vulnerability. It has been evaluated to be in the Important severity range. The vulnerability can be triggered by an authenticated administrator. Past authentication bypass vulnerabilities have been published, which could potentially be used in conjunction with this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-31700

Affected Products

Vmware Identity Manager

Vmware Workspace One Access

References · 8

• https://vmware.com/security/advisories/VMSA-2022-0032.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31700 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31700 · Vendor Advisory
• https://github.com/fuzzingrf/netbsd_hfs · Note
• https://t.me/ptswarm/161 · Telegram Post
• https://t.me/cibsecurity/54549 · Telegram Post
• https://t.me/cybersecuritytechnologies/7865 · Telegram Post
• https://t.me/cvenotify/39896 · Telegram Post