Broken Authentication in VMware Workspace ONE Access and Identity Manager
CVE-2022-31701

5.3MEDIUM

Key Information:

Vendor

Vmware
Status
Vmware Workspace One Access (access), Vmware Identity Manager (vidm)
Vendor
CVE Published:
14 December 2022

What is CVE-2022-31701?

VMware Workspace ONE Access and Identity Manager are impacted by a broken authentication vulnerability that could allow unauthorized users to gain access to sensitive information or functionality. This issue highlights the importance of ensuring robust authentication mechanisms to protect user data and maintain system integrity. Administrators are encouraged to apply the necessary patches and review their security configurations to mitigate potential risks associated with this vulnerability.

Affected Version(s)

VMware Workspace ONE Access (Access), VMware Identity Manager (vIDM) VMware Workspace ONE Access (Multiple Versions)

References

https://www.vmware.com/security/advisories/VMSA-2022-0032...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.