CVE-2022-31687: Critical severity vmware workspace one assist vulnerability
VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-31687?
CVE-2022-31687 is considered a critical vulnerability due to its potential for unauthorized administrative access.
How do I fix CVE-2022-31687?
To fix CVE-2022-31687, update VMware Workspace ONE Assist to version 22.10 or later.
Who is affected by CVE-2022-31687?
Organizations using VMware Workspace ONE Assist versions prior to 22.10 are affected by CVE-2022-31687.
What causes CVE-2022-31687?
CVE-2022-31687 is caused by a broken access control vulnerability that allows unauthenticated administrative access.
Can CVE-2022-31687 be exploited remotely?
Yes, CVE-2022-31687 can be exploited remotely by a malicious actor with network access to Workspace ONE Assist.