Beveiligingsadvies

CVE-2022-22956

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-04-13 00:00:00
Laatst bijgewerkt 2025-02-13 16:28:57
Toegewezen door vmware
CVSS-score geen score
Status PUBLISHED

Beschrijving

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework.