imPC@ndo IT

Tracker / CVE-2022-22972

CVE-2022-22972

Critical 9.8

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.

Affected products and versions

vmware cloud_foundation
vmware identity_manager
vmware vrealize_automation
vmware vrealize_suite_lifecycle_manager
vmware workspace_one_access

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References