Privilege Escalation Vulnerability in VMware Workspace ONE Access and Identity Manager
CVE-2022-22960
Key Information:
- Vendor
- Vmware
- Vendor
- CVE Published:
- 13 April 2022
Badges
Summary
VMware Workspace ONE Access, Identity Manager, and vRealize Automation contain a vulnerability that allows a malicious user with local access to escalate their privileges to 'root'. This is due to improper permissions configured within support scripts, which can be exploited to gain elevated rights on the system. Users are encouraged to review their environment for affected versions and apply necessary security patches to mitigate potential risks.
CISA Reported
CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace
The CISA's recommendation is: Apply updates per vendor instructions.
Affected Version(s)
VMware Workspace ONE Access, Identity Manager and vRealize Automation Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3. vRealize Automation 7.6.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V3.1
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
- 🦅
CISA Reported
Vulnerability published
Vulnerability Reserved