vulnerability
VMware Workspace ONE Access: CVE-2022-22972: Authentication Bypass Vulnerability (VMSA-2022-0014) (Unauthenticated Remote)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | May 18, 2022 | Aug 23, 2022 | Aug 23, 2022 |
Severity
7
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
May 18, 2022
Added
Aug 23, 2022
Modified
Aug 23, 2022
Description
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Solution
vmware-workspace-one-access-apply-hotfix-patch-HW-156875
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.