VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 20, 2021· Updated Jun 17, 2026

CVE-2021-22056

CVE-2021-22056

Description

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability. A malicious actor with network access may be able to make HTTP requests to arbitrary origins and read the full response.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • VMware/Identity Manager4 versions
    cpe:2.3:a:vmware:identity_manager:3.3.3:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:vmware:identity_manager:3.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:identity_manager:3.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:identity_manager:3.3.5:*:*:*:*:*:*:*
    • (no CPE)range: 3.3.5, 3.3.4, 3.3.3
  • VMware/Vrealize Automation2 versions
    cpe:2.3:a:vmware:vrealize_automation:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:vrealize_automation:*:*:*:*:*:*:*:*range: >=8.0,<=8.6
    • cpe:2.3:a:vmware:vrealize_automation:7.6:*:*:*:*:*:*:*
  • VMware/Workspace One Access5 versions
    cpe:2.3:a:vmware:workspace_one_access:20.10.01:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:vmware:workspace_one_access:20.10.01:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:workspace_one_access:20.10:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:workspace_one_access:21.08.01:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:workspace_one_access:21.08:*:*:*:*:*:*:*
    • (no CPE)range: 21.08, 20.10.0.1, 20.10
  • VMware/Workspace ONE Accessdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.