CVE Vulnerabilities

CVE-2022-22973

Published: May 20, 2022 | Modified: Aug 08, 2023
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to root.

Affected Software

Name Vendor Start Version End Version
Identity_manager Vmware 3.3.3 (including) 3.3.3 (including)
Identity_manager Vmware 3.3.4 (including) 3.3.4 (including)
Identity_manager Vmware 3.3.5 (including) 3.3.5 (including)
Identity_manager Vmware 3.3.6 (including) 3.3.6 (including)
Workspace_one_access Vmware 20.10.0.0 (including) 20.10.0.0 (including)
Workspace_one_access Vmware 20.10.0.1 (including) 20.10.0.1 (including)
Workspace_one_access Vmware 21.08.0.0 (including) 21.08.0.0 (including)
Workspace_one_access Vmware 21.08.0.1 (including) 21.08.0.1 (including)

References