vulnerability

VMware Workspace ONE Access: CVE-2022-31658: JDBC Injection Remote Code Execution Vulnerability (VMSA-2022-0021)

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
8	(AV:N/AC:L/Au:M/C:C/I:C/A:C)	2022-08-03	2022-08-03	2025-01-28

Severity

CVSS

(AV:N/AC:L/Au:M/C:C/I:C/A:C)

Published

2022-08-03

Added

2022-08-03

Modified

2025-01-28

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.

Solution(s)

vmware-workspace-one-access-upgrade-21_08_0_0_18530336vmware-workspace-one-access-upgrade-21_08_0_1_19010796

References

CVE-2022-31658
https://attackerkb.com/topics/CVE-2022-31658
URL-http://www.vmware.com/security/advisories/VMSA-2022-0021.html

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today