Exploit / PoCcriticalExploited in the wild

VMware fixed a critical auth bypass issue in some of its products

Security Affairsby @securityaffairsMay 18, 2022 · 21:29 UTC (May 18, 2022)1 min read3 · 2 reads

Read at securityaffairs.com

Analyze CVE-2022-22972 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-22972 CVE-2022-22973

Tags: cve-2022-22972 cve-2022-22973 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-22972 +1 related CVE CVE-2022-22973	VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users	9.8 group max	56%		May 20, 2022

From the original article

1 min read at securityaffairs.com

VMware addressed a critical authentication bypass vulnerability “affecting local domain users” in multiple products. The virtualization giant warns that a threat actor can exploit the flaw, tracked as CVE-2022-22972 (CVSSv3 base score of 9. 8), to obtain admin privileges and urges customers to install patches immediately.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.