CVE-2021-22002: Critical severity vmware workspace one access and identity manager vulnerability

Published Aug 31, 2021
·
Updated

VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network access to port 443 could tamper with host headers to facilitate access to the /cfg web app, in addition a malicious actor could access /cfg diagnostic endpoints without authentication.

Affected Software

17 affected components
VMware Identity Manager=3.3.2
VMware Identity Manager=3.3.3
VMware Identity Manager=3.3.4
VMware Identity Manager=3.3.5
VMware Workspace ONE Access=20.01
VMware Workspace ONE Access=20.10
VMware Workspace ONE Access=20.10.01
Linux Linux kernel
VMware Cloud Foundation=4.0
VMware Cloud Foundation=4.0.1
VMware Cloud Foundation=4.1
VMware Cloud Foundation=4.1.0.1
VMware Cloud Foundation=4.2.1
VMware Vrealize Suite Lifecycle Manager=8.0
VMware Vrealize Suite Lifecycle Manager=8.0.1
VMware Vrealize Suite Lifecycle Manager=8.1
VMware Vrealize Suite Lifecycle Manager=8.2

Event History

Aug 31, 2021
CVE Published
via MITRE·09:02 PM
Data Sourced
via MITRE·09:02 PM
DescriptionWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2021-22002?

CVE-2021-22002 is a vulnerability in VMware Workspace ONE Access and Identity Manager that allows the /cfg web app and diagnostic endpoints on port 8443 to be accessed via port 443 using a custom host header.

2

Which software versions are affected by CVE-2021-22002?

CVE-2021-22002 affects VMware Identity Manager versions 3.3.2, 3.3.3, 3.3.4, and 3.3.5, as well as VMware Workspace ONE Access versions 20.01, 20.10, and 20.10.01.

3

How severe is CVE-2021-22002?

CVE-2021-22002 has a severity rating of 9.8 (Critical).

4

How can an attacker exploit CVE-2021-22002?

An attacker with network access to port 443 could tamper with host headers to gain unauthorized access to the /cfg web app in VMware Workspace ONE Access and Identity Manager.

5

Is the Linux Linux kernel vulnerable to CVE-2021-22002?

No, the Linux Linux kernel is not vulnerable to CVE-2021-22002.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203