Security Advisory

CVE-2022-22955

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-04-13 17:05:58

Last updated 2024-08-03 03:28:42

Assigner vmware

State PUBLISHED

Description

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework.

← Browse all CVEs View on cve.org ↗