[ CVE-2022-22960 · Published 13 Apr 2022 ]
VMware Multiple Products Privilege Escalation Vulnerability
Exploited · CISA KEV CVSS 7.8
EPSS 36%Fix available
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-04-15
- EPSS: 36% chance of exploitation in the next 30 days (higher than 98% of CVEs)
[ Description ]Official description
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.
CISA: VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 6 May 2022): Apply updates per vendor instructions.
- Patch on vmware.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ References ]References
- packetstormsecurity.com/files/171918/Mware-Workspace-ONE-Remote-Code-Execution.htmlExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/171918/VMware-Workspace-ONE-Remote-Code-Execution.htmlExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/171935/VMware-Workspace-ONE-Access-Privilege-Escalation.htmlExploitThird Party AdvisoryVDB Entry
- www.vmware.com/security/advisories/VMSA-2022-0011.htmlPatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource