High severity7.8CISA KEVNVD Advisory· Published Apr 13, 2022· Updated Jun 17, 2026
CVE-2022-22960
CVE-2022-22960
Description
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:a:vmware:identity_manager:3.3.3:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:vmware:identity_manager:3.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:identity_manager:3.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:identity_manager:3.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:identity_manager:3.3.6:*:*:*:*:*:*:*
- (no CPE)
cpe:2.3:a:vmware:vrealize_automation:7.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vmware:vrealize_automation:7.6:*:*:*:*:*:*:*
- (no CPE)
- cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:*:*:*:*:*:*:*:*Range: >=8.0,<9.0
cpe:2.3:a:vmware:workspace_one_access:20.10.0.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:vmware:workspace_one_access:20.10.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workspace_one_access:20.10.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workspace_one_access:21.08.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:vmware:workspace_one_access:21.08.0.1:*:*:*:*:*:*:*
- (no CPE)
- VMware/Workspace ONE Accessdescription
Patches
Vulnerability mechanics
References
5- www.vmware.com/security/advisories/VMSA-2022-0011.htmlnvdPatchVendor Advisory
- packetstormsecurity.com/files/171918/Mware-Workspace-ONE-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/171918/VMware-Workspace-ONE-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/171935/VMware-Workspace-ONE-Access-Privilege-Escalation.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.