Vulnerabilitycritical

VMware fixes critical SSRF flaw in Workspace ONE UEM Console

Security Affairsby @securityaffairsDec 17, 2021 · 15:11 UTC (Dec 17, 2021)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2021-22054 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-22054

Tags: cve-2021-22054 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-22054	Unauthenticated SSRF in VMware (Omnissa) Workspace ONE UEM Console	7.5	100%	KEV	Dec 17, 2021 KEV Mar 9, 2026

From the original article

2 min read at securityaffairs.com

VMware released security patches for a critical server-side request forgery (SSRF) vulnerability in Workspace ONE UEM console. VMware has addressed a critical server-side request forgery (SSRF) vulnerability, tracked as CVE-2021-22054 , in the Workspace ONE UEM console. An attacker with network access to UEM could exploit the vulnerability to access sensitive data in the management console.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.