← Database

CVE-2022-22972

CRITICAL CVSS: 9.8 Published: 2022-05-20 Modified: 2026-06-17

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.

Affected Platforms

Vmware Cloud FoundationVmware Identity ManagerLinux Linux KernelVmware Workspace One AccessVmware Vrealize Suite Lifecycle ManagerVmware Vrealize Automation

Weakness Type

NVD-CWE-noinfo

References