← back
CVE-2022-22956

CVE-2022-22956

EPSS 49.9%
VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework.
Affected products
n/a · VMware Workspace ONE Access

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/171918/Mware-Workspace-ONE-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/171918/VMware-Workspace-ONE-Remote-Code-Execution.htmlhttps://www.vmware.com/security/advisories/VMSA-2022-0011.html