CVE-2022-31701

Summary

CVE	CVE-2022-31701
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-12-14 19:15:00 UTC
Updated	2023-08-08 14:22:00 UTC
Description	VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.

Risk And Classification

Problem Types: CWE-306

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	-	All	All	All
Application	Vmware	Access	21.08.0.0	All	All	All
Application	Vmware	Access	21.08.0.1	All	All	All
Application	Vmware	Access	22.09.0.0	All	All	All
Application	Vmware	Cloud Foundation	All	All	All	All
Application	Vmware	Identity Manager Connector	3.3.6	All	All	All

References

Reference	Source	Link	Tags
VMSA-2022-0032	MISC	www.vmware.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

377877 VMware Identity Manager (vIDM) and Workspace ONE Access Authenticated Remote Code Execution (RCE) Vulnerability (VMSA-2022-0032)
730684 VMware Identity Manager (vIDM) and Workspace ONE Access Authenticated Remote Code Execution (RCE) Vulnerability (VMSA-2022-0032) (Unauthenticated Check)