CVE-2022-31656

CVSS 3.1: 9.8 critical
EPSS: 23%p98
Published: Aug 5, 2022 · Aug 5, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-31656 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.

Vendors: vmware

Products: identity manager, one access, access connector, identity manager connector

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (22.9%)

In the news

7 stories

CISA urges defenders to update after VMware patches vulnerabilities in multiple products

The RecordJan 11, 00:00 UTC · Jan 11, 2023VulnerabilityExploitedCVE-2022-31656 CVE-2022-31659 CVE-2021-442281

Week in review: Spot deep-faked job candidates, data exfiltration via bookmarks, Patch Tuesday forecast

Help Net SecurityAug 7, 00:00 UTC · Aug 7, 2022VulnerabilityCVE-2022-316562

VMware Releases Patches for Several New Flaws Affecting Multiple Products

The Hacker NewsAug 3, 08:25 UTC · Aug 3, 2022VulnerabilityCVE-2022-31656 CVE-2022-31665 CVE-2022-31658+72

Description · NVD

In the news

CISA urges defenders to update after VMware patches vulnerabilities in multiple products

Malicious code exploiting recent VMware bug publicly available, company warns

VMware warns of public PoC code for critical auth bypass bug CVE-2022

VMware: Patch this critical vulnerability immediately! (CVE-2022-31656)

VMware fixed critical authentication bypass vulnerability

Week in review: Spot deep-faked job candidates, data exfiltration via bookmarks, Patch Tuesday forecast

VMware Releases Patches for Several New Flaws Affecting Multiple Products