CVE-2021-22056

Vulnerability

An SSRF vulnerability exists in VMware Workspace ONE Access versions 21.08, 20.10.0.1, and 20.10, and in VMware Identity Manager versions 3.3.5, 3.3.4, and 3.3.3. The vulnerability allows a malicious actor with network access to make HTTP requests to arbitrary origins and read the full response [1].

Exploitation

An attacker requires network access to the affected server. No authentication is mentioned as a prerequisite. The attacker can craft HTTP requests to arbitrary URLs, potentially including internal services or cloud metadata endpoints, and receive the full response [1].

Impact

Successful exploitation can lead to disclosure of sensitive information from internal systems, such as cloud provider metadata or other internal service responses, due to the ability to read the full response from arbitrary origins [1].

Mitigation

VMware released patches to address this vulnerability. The advisory recommends updating Workspace ONE Access to versions 21.08.0.1, 20.10.0.2, or later, and Identity Manager to versions 3.3.6 or later [1].