CVE-2022-31660: High severity vmware workspace one access and identity manager vulnerability
Published Aug 5, 2022
·Updated
VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.
Affected Software
14 affected components
VMware Identity Manager=3.3.4
VMware Identity Manager=3.3.5
VMware Identity Manager=3.3.6
VMware ONE Access=21.08.0.0
VMware ONE Access=21.08.0.1
Linux Linux kernel
VMware Access Connector=21.08.0.0
VMware Access Connector=21.08.0.1
VMware Access Connector=22.05
VMware Identity Manager Connector=3.3.4
VMware Identity Manager Connector=3.3.5
VMware Identity Manager Connector=3.3.6
VMware Identity Manager Connector=19.03.0.1
Microsoft Windows
Remediation
Event History
Aug 5, 2022
CVE Published
via MITRE·03:05 PM
Data Sourced
via MITRE·03:05 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-31660.
2
What is the severity of CVE-2022-31660?
The severity of CVE-2022-31660 is high (7.8).
3
Which software is affected by CVE-2022-31660?
VMware Workspace ONE Access, Identity Manager, and vRealize Automation version 3.3.4, 3.3.5, and 3.3.6 are affected. VMware One Access version 21.08.0.0 and 21.08.0.1 are also affected.
4
What is the impact of the vulnerability?
The vulnerability allows a malicious actor with local access to escalate privileges to 'root'.
5
Is the Linux Kernel vulnerable to CVE-2022-31660?
No, the Linux Kernel is not vulnerable to CVE-2022-31660.