CVE-2021-22057
First published: Mon Dec 20 2021(Updated: )
VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass vulnerability. A malicious actor, who has successfully provided first-factor authentication, may be able to obtain second-factor authentication provided by VMware Verify.
Credit: security@vmware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Workspace ONE Access | =20.10 | |
| VMware Workspace ONE Access | =20.10.0.1 | |
| VMware Workspace ONE Access | =21.08 | |
| VMware Workspace ONE Access | =21.08.0.1 | |
| Linux Linux kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-22057?
CVE-2021-22057 is an authentication bypass vulnerability found in VMware Workspace ONE Access.
Which versions of VMware Workspace ONE Access are affected?
VMware Workspace ONE Access versions 20.10, 20.10.0.1, 21.08, and 21.08.0.1 are affected.
What is the severity of CVE-2021-22057?
The severity of CVE-2021-22057 is rated as high with a CVSS score of 8.8.
What is the impact of CVE-2021-22057?
A successful attacker who has provided first-factor authentication can bypass second-factor authentication provided by VMware Verify.
Is there a fix available for CVE-2021-22057?
Yes, VMware has released security advisories and patches to address the authentication bypass vulnerability. Please refer to the official VMware advisory for more details and apply the necessary updates.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/remedy
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/vmware
- canonical/vmware workspace one access
- version/vmware workspace one access/20.10
- version/vmware workspace one access/20.10.0.1
- version/vmware workspace one access/21.08
- version/vmware workspace one access/21.08.0.1
- vendor/linux
- canonical/linux linux kernel