← Database

CVE-2022-22960

HIGH CVSS: 7.8 Published: 2022-04-13 Modified: 2026-06-17

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.

Affected Platforms

Vmware Cloud FoundationVmware Identity ManagerLinux Linux KernelVmware Vrealize AutomationVmware Workspace One AccessVmware Vrealize Suite Lifecycle Manager

Weakness Type

CWE-732, CWE-732

References