imPC@ndo IT

Tracker / CVE-2022-22960

CVE-2022-22960

Exploited High 7.8

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.

Affected products and versions

vmware cloud_foundation · 3.0 → 5.0
vmware identity_manager
vmware vrealize_automation
vmware vrealize_suite_lifecycle_manager · 8.0 → 9.0
vmware workspace_one_access

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References