CVE-2022-31656

Critical · 9.8

CVSS

9.8

EPSS

24.7%

Published

Aug 5, 2022

CISA due date

—

The record

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.

Affected packages

Ecosystem	Package	Introduced	Fixed