Vulnerabilitycritical

VMware fixed critical authentication bypass vulnerability

Security Affairsby @securityaffairsAug 9, 2022 · 22:51 UTC (Aug 9, 2022)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-31656 CVE-2022-31657 CVE-2022-31658 CVE-2022-31659 CVE-2022-31660 CVE-2022-31661 CVE-2022-31662 CVE-2022-31663 CVE-2022-31664 CVE-2022-31665

Tags: cve-2022-31656 cve-2022-31657 cve-2022-31658 cve-2022-31659 cve-2022-31660 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-31656 +9 related CVEs CVE-2022-31657 CVE-2022-31660 CVE-2022-31661 CVE-2022-31664 CVE-2022-31662 CVE-2022-31659 CVE-2022-31665 CVE-2022-31658 CVE-2022-31663	VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users	9.8 group max	23%		Aug 5, 2022

From the original article

2 min read at securityaffairs.com

VMware patched a critical authentication bypass security flaw, tracked as CVE-2022-31656, impacting local domain users in multiple products. VMware has addressed a critical authentication bypass security flaw, tracked as CVE-2022-31656, impacting local domain users in multiple products. An unauthenticated attacker can exploit the vulnerability to gain admin privileges.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.