VMWare Products Multiple Vulnerabilities
Release Date: 4 Aug 2022
RISK: Medium Risk
TYPE: Operating Systems - VM Ware
Multiple vulnerabilities were identified in VMware products. An attacker could exploit some of these vulnerabilities to trigger security restriction bypass, remote code execution, cross-site scripting and elevation of privilege.
Impact
- Security Restriction Bypass
- Elevation of Privilege
- Cross-Site Scripting
- Remote Code Execution
System / Technologies affected
- VMware Workspace ONE Access (Access)
- VMware Workspace ONE Access Connector (Access Connector)
- VMware Identity Manager (vIDM)
- VMware Identity Manager Connector (vIDM Connector)
- VMware vRealize Automation (vRA)
- VMware Cloud Foundation
- vRealize Suite Lifecycle Manager
Solutions
Before installation of the software, please visit the vendor web-site for more details.
- Apply fixes issued by the vendor:
https://www.vmware.com/security/advisories/VMSA-2022-0021.html
Vulnerability Identifier
- CVE-2022-31656
- CVE-2022-31657
- CVE-2022-31658
- CVE-2022-31659
- CVE-2022-31660
- CVE-2022-31661
- CVE-2022-31662
- CVE-2022-31663
- CVE-2022-31664
- CVE-2022-31665
沒有留言:
發佈留言