← Database

CVE-2022-22956

CRITICAL CVSS: 9.8 Published: 2022-04-13 Modified: 2026-06-17

Description

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework.

Affected Platforms

Vmware Workspace One AccessVmware Identity ManagerVmware Vrealize AutomationLinux Linux Kernel

Weakness Type

CWE-287

References