← Database

CVE-2022-31656

CRITICAL CVSS: 9.8 Published: 2022-08-05 Modified: 2026-06-17

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.

Affected Platforms

Microsoft WindowsVmware Identity ManagerVmware One AccessVmware Access ConnectorLinux Linux KernelVmware Identity Manager Connector

Weakness Type

NVD-CWE-noinfo

References