Information Disclosure Vulnerability in VMware Workspace ONE Access

CVE-2022-22961

Summary

VMware Workspace ONE Access, Identity Manager, and vRealize Automation are affected by an information disclosure vulnerability that arises from returning excess information in responses. A remote attacker could exploit this vulnerability to extract the hostname of the target system, potentially leading to further targeting of victims. It is crucial for users to assess their exposure and apply necessary mitigations as outlined in VMware's security advisory.

References