VMware Vulnerabilities

VMware Vulnerabilities

Two vulnerabilities related to various products (with different criticalities) have been released by VMware. If exploited, these vulnerabilities are likely to cause getting administrator rights via authentication bypass method, etc.

Affected Systems

• VMware Workspace ONE Access (Access)
• VMware Identity Manager (vIDM)
• VMware vRealize Automation (vRA)
• VMware Cloud Foundation
• vRealize Suite Lifecycle Manager

IoC’s

-

Recommended Solution(s)

It is highly recommended that the users implement the recommended solutions specified by VMware in the following link.

CVE / CWE

CVE-2022-22972, CVE-2022-22973

Related Website(s)

• https://www.vmware.com/security/advisories/VMSA-2022-0014.html
• https://nvd.nist.gov/vuln/detail/CVE-2022-22972
• https://nvd.nist.gov/vuln/detail/CVE-2022-22973

* Vulnerabilities with a CVSS 3.1 score between 7.0 and 8.9 are evaluated to be “high” whereas vulnerabilities with a CVSS 3.1 score between 9.0 and 10.0 are evaluated to be “critical”.