← Database

CVE-2022-31689

CRITICAL CVSS: 9.8 Published: 2022-11-09 Modified: 2026-06-17

Description

VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authenticate to the application using that token.

Affected Platforms

Vmware Workspace One Assist

Weakness Type

CWE-384, CWE-384

References