9.8
CVE-2022-22972
- EPSS 93.72%
- Published 20.05.2022 21:15:09
- Last modified 21.11.2024 06:47:43
- Source security@vmware.com
- Teams watchlist Login
- Open Login
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Data is provided by the National Vulnerability Database (NVD)
VMware ≫ Identity Manager Version3.3.3
VMware ≫ Identity Manager Version3.3.4
VMware ≫ Identity Manager Version3.3.5
VMware ≫ Identity Manager Version3.3.6
VMware ≫ Vrealize Automation Version7.6
VMware ≫ Workspace One Access Version20.10.0.0
VMware ≫ Workspace One Access Version20.10.0.1
VMware ≫ Workspace One Access Version21.08.0.0
VMware ≫ Workspace One Access Version21.08.0.1
VMware ≫ Cloud Foundation Version3.0
VMware ≫ Cloud Foundation Version3.0.1
VMware ≫ Cloud Foundation Version3.0.1.1
VMware ≫ Cloud Foundation Version3.5
VMware ≫ Cloud Foundation Version3.5.1
VMware ≫ Cloud Foundation Version3.7
VMware ≫ Cloud Foundation Version3.7.1
VMware ≫ Cloud Foundation Version3.7.2
VMware ≫ Cloud Foundation Version3.8
VMware ≫ Cloud Foundation Version3.8.1
VMware ≫ Cloud Foundation Version3.9
VMware ≫ Cloud Foundation Version3.9.1
VMware ≫ Cloud Foundation Version3.10
VMware ≫ Cloud Foundation Version3.10.1
VMware ≫ Cloud Foundation Version3.10.1.1
VMware ≫ Cloud Foundation Version3.10.1.2
VMware ≫ Cloud Foundation Version3.10.2.1
VMware ≫ Cloud Foundation Version3.10.2.2
VMware ≫ Cloud Foundation Version3.11
VMware ≫ Cloud Foundation Version3.11.0.1
VMware ≫ Cloud Foundation Version4.0
VMware ≫ Cloud Foundation Version4.0.1
VMware ≫ Cloud Foundation Version4.1
VMware ≫ Cloud Foundation Version4.1.0.1
VMware ≫ Cloud Foundation Version4.2
VMware ≫ Cloud Foundation Version4.2.1
VMware ≫ Cloud Foundation Version4.3
VMware ≫ Cloud Foundation Version4.3.1
VMware ≫ Vrealize Suite Lifecycle Manager Version8.0
VMware ≫ Vrealize Suite Lifecycle Manager Version8.0.1
VMware ≫ Vrealize Suite Lifecycle Manager Version8.1
VMware ≫ Vrealize Suite Lifecycle Manager Version8.2
VMware ≫ Vrealize Suite Lifecycle Manager Version8.2 Updatepatch1
VMware ≫ Vrealize Suite Lifecycle Manager Version8.2 Updatepatch2
VMware ≫ Vrealize Suite Lifecycle Manager Version8.2 Updatepatch3
VMware ≫ Vrealize Suite Lifecycle Manager Version8.3
VMware ≫ Vrealize Suite Lifecycle Manager Version8.3 Updatepatch1
VMware ≫ Vrealize Suite Lifecycle Manager Version8.3 Updatepatch2
VMware ≫ Vrealize Suite Lifecycle Manager Version8.3 Updatepatch3
VMware ≫ Vrealize Suite Lifecycle Manager Version8.4
VMware ≫ Vrealize Suite Lifecycle Manager Version8.4 Updatepatch1
VMware ≫ Vrealize Suite Lifecycle Manager Version8.4.1
VMware ≫ Vrealize Suite Lifecycle Manager Version8.4.1 Updatepatch1
VMware ≫ Vrealize Suite Lifecycle Manager Version8.4.1 Updatepatch2
VMware ≫ Vrealize Suite Lifecycle Manager Version8.4.1 Updatepatch3
VMware ≫ Vrealize Suite Lifecycle Manager Version8.6
VMware ≫ Vrealize Suite Lifecycle Manager Version8.6 Updatepatch1
VMware ≫ Vrealize Suite Lifecycle Manager Version8.6.1
VMware ≫ Vrealize Suite Lifecycle Manager Version8.6.2
VMware ≫ Vrealize Suite Lifecycle Manager Version8.7
VMware ≫ Vrealize Suite Lifecycle Manager Version8.8
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 93.72% | 0.998 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|