PT-2022-2185 · Vmware · Vmware Cloud Foundation+4

Mr_Me + 1 · Published 2022-01-10 · Updated 2023-12-20 · CVE-2022-22957

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Workspace ONE Access (affected versions not specified) VMware vRealize Automation (affected versions not specified) VMware Identity Manager (vIDM) (affected versions not specified) VMware Cloud Foundation (affected versions not specified) vRealize Suite Lifecycle Manager (affected versions not specified)

Description The issue is related to deficiencies in the deserialization mechanism of the affected VMware products. Exploitation of this issue may allow a remote attacker to execute arbitrary code by transmitting specially crafted data through a JDBC URI.

Recommendations For VMware Workspace ONE Access, update to a version that includes a fix for the deserialization mechanism issue. For VMware vRealize Automation, update to a version that includes a fix for the deserialization mechanism issue. For VMware Identity Manager (vIDM), update to a version that includes a fix for the deserialization mechanism issue. For VMware Cloud Foundation, update to a version that includes a fix for the deserialization mechanism issue. For vRealize Suite Lifecycle Manager, update to a version that includes a fix for the deserialization mechanism issue.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2022-02212

CVE-2022-22957

Affected Products

Vmware Cloud Foundation

Vmware Identity Manager

Vmware Workspace One Access

Vmware Vrealize Automation

Vrealize Suite Lifecycle Manager

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.rb · Exploit
• https://bdu.fstec.ru/vul/2022-02212 · Security Note
• https://vmware.com/security/advisories/VMSA-2022-0011.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22957 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22957 · Security Note
• https://cybersecurity-help.cz/vdb/SB2022040614 · Note
• https://t.me/my_cyde/455 · Telegram Post
• http://packetstormsecurity.com/files/171918/VMware-Workspace-ONE-Remote-Code-Execution.html · Note
• http://packetstormsecurity.com/files/171918/Mware-Workspace-ONE-Remote-Code-Execution.html · Note
• https://twitter.com/steventseeley/status/1737549322278047925 · Twitter Post
• https://vuldb.com/ru/?id.196647 · Note
• https://t.me/cybersecuritytechnologies/8149 · Telegram Post
• https://t.me/aptreports/829 · Telegram Post