← Database

CVE-2022-22955

CRITICAL CVSS: 9.8 Published: 2022-04-13 Modified: 2026-06-17

Description

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework.

Affected Platforms

Vmware Workspace One AccessVmware Identity ManagerVmware Vrealize AutomationLinux Linux Kernel

Weakness Type

NVD-CWE-noinfo

References