Critical severity9.8NVD Advisory· Published Apr 13, 2022· Updated Jun 17, 2026

CVE-2022-22956

Description

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VMware/Workspace ONE Accessdescription
VMware/Workspace One Accessllm-fuzzy

Patches

Vulnerability mechanics

References

www.vmware.com/security/advisories/VMSA-2022-0011.htmlnvdPatchVendor Advisory
packetstormsecurity.com/files/171918/Mware-Workspace-ONE-Remote-Code-Execution.htmlnvd
packetstormsecurity.com/files/171918/VMware-Workspace-ONE-Remote-Code-Execution.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.041
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000