Security Advisory

CVE-2022-22956

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-04-13 00:00:00

Last updated 2025-02-13 16:28:57

Assigner vmware

State PUBLISHED

Description

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework.

← Browse all CVEs View on cve.org ↗