module

VMware Workspace ONE Access CVE-2022-22960

Try Surface Command
Back to search
Disclosed
Apr 6, 2022

Description

This module exploits CVE-2022-22960 which allows the user to overwrite the permissions of the
certproxyService.sh script so that it can be modified by the horizon user. This allows a local attacker with
the uid 1001 to escalate their privileges to root access.
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.