Vulnerability Details CVE-2022-22972
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.937
EPSS Ranking 99.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2022-22972
-
cpe:2.3:a:linux:linux_kernel:-
-
cpe:2.3:a:vmware:cloud_foundation:3.0
-
cpe:2.3:a:vmware:cloud_foundation:3.0.1
-
cpe:2.3:a:vmware:cloud_foundation:3.0.1.1
-
cpe:2.3:a:vmware:cloud_foundation:3.10
-
cpe:2.3:a:vmware:cloud_foundation:3.10.1
-
cpe:2.3:a:vmware:cloud_foundation:3.10.1.1
-
cpe:2.3:a:vmware:cloud_foundation:3.10.1.2
-
cpe:2.3:a:vmware:cloud_foundation:3.10.2.1
-
cpe:2.3:a:vmware:cloud_foundation:3.10.2.2
-
cpe:2.3:a:vmware:cloud_foundation:3.11
-
cpe:2.3:a:vmware:cloud_foundation:3.11.0.1
-
cpe:2.3:a:vmware:cloud_foundation:3.5
-
cpe:2.3:a:vmware:cloud_foundation:3.5.1
-
cpe:2.3:a:vmware:cloud_foundation:3.7
-
cpe:2.3:a:vmware:cloud_foundation:3.7.1
-
cpe:2.3:a:vmware:cloud_foundation:3.7.2
-
cpe:2.3:a:vmware:cloud_foundation:3.8
-
cpe:2.3:a:vmware:cloud_foundation:3.8.1
-
cpe:2.3:a:vmware:cloud_foundation:3.9
-
cpe:2.3:a:vmware:cloud_foundation:3.9.1
-
cpe:2.3:a:vmware:cloud_foundation:4.0
-
cpe:2.3:a:vmware:cloud_foundation:4.0.1
-
cpe:2.3:a:vmware:cloud_foundation:4.1
-
cpe:2.3:a:vmware:cloud_foundation:4.1.0.1
-
cpe:2.3:a:vmware:cloud_foundation:4.2
-
cpe:2.3:a:vmware:cloud_foundation:4.2.1
-
cpe:2.3:a:vmware:cloud_foundation:4.3
-
cpe:2.3:a:vmware:cloud_foundation:4.3.1
-
cpe:2.3:a:vmware:identity_manager:3.3.3
-
cpe:2.3:a:vmware:identity_manager:3.3.4
-
cpe:2.3:a:vmware:identity_manager:3.3.5
-
cpe:2.3:a:vmware:identity_manager:3.3.6
-
cpe:2.3:a:vmware:vrealize_automation:7.6
-
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0
-
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0.1
-
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.1
-
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2
-
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.3
-
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4
-
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4.1
-
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6
-
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6.1
-
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6.2
-
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.7
-
cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.8
-
cpe:2.3:a:vmware:workspace_one_access:20.10.0.0
-
cpe:2.3:a:vmware:workspace_one_access:20.10.0.1
-
cpe:2.3:a:vmware:workspace_one_access:21.08.0.0
-
cpe:2.3:a:vmware:workspace_one_access:21.08.0.1