Rewterz Threat Advisory – VMware Workspace ONE Access and Identity Manager Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2022-31700 CVSS:7.2

VMware Workspace ONE Access and Identity Manager could allow a remote authenticated attacker to execute arbitrary code on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2022-31701 CVSS:5.3

VMware Workspace ONE Access and Identity Manager could allow a remote attacker to obtain sensitive information, caused by a broken authentication vulnerability. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information.

Impact

• Code Execution
• Information Disclosure

Indicators Of Compromise

CVE

• CVE-2022-31700
• CVE-2022-31701

Affected Vendors

VMware

Affected Products

• VMWare Workspace ONE Access 21.08.0.0
• VMWare Workspace ONE Access 21.08.0.1
• VMWare Workspace ONE Access 22.09.0.0
• VMWare Workspace ONE Identity Manager 3.3.6

Remediation

Refer to VMware Security Advisory for patch, upgrade or suggested workaround information.

VMware Security Advisory