VulnerabilitycriticalExploited in the wild

CISA urges defenders to update after VMware patches vulnerabilities in multiple products

The RecordJan 11, 2023 · 00:00 UTC (Jan 11, 2023)2 min read1

Read at therecord.media

Analyze CVE-2022-31656 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-31656 CVE-2022-31659 CVE-2021-44228

Tags: cve-2022-31656 cve-2022-31659 cve-2021-44228 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2022-31656 +1 related CVE CVE-2022-31659	VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users	9.8 group max	23%		Aug 5, 2022

From the original article

2 min read at therecord.media

The Cybersecurity and Infrastructure Security Agency (CISA) warned of several vulnerabilities recently identified and patched by VMware affecting a variety of the company’s products. VMware released security updates to address multiple vulnerabilities in VMware’s Workspace ONE Access, Access Connector, Identity Manager, Identity Manager Connector, and vRealize Automation.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.