VYPR
← All advisories
High severity7.8NVD Advisory· Published Aug 5, 2022· Updated Jun 17, 2026

CVE-2022-31661

CVE-2022-31661

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor with local access can escalate privileges to 'root'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16
  • VMware/Access Connector3 versions
    cpe:2.3:a:vmware:access_connector:21.08.0.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:vmware:access_connector:21.08.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:access_connector:21.08.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:access_connector:22.05:*:*:*:*:*:*:*
  • VMware/Identity Manager4 versions
    cpe:2.3:a:vmware:identity_manager:3.3.4:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:vmware:identity_manager:3.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:identity_manager:3.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:identity_manager:3.3.6:*:*:*:*:*:*:*
    • (no CPE)
  • VMware/Identity Manager Connector4 versions
    cpe:2.3:a:vmware:identity_manager_connector:19.03.0.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:vmware:identity_manager_connector:19.03.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:identity_manager_connector:3.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:identity_manager_connector:3.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:identity_manager_connector:3.3.6:*:*:*:*:*:*:*
  • VMware/One Access2 versions
    cpe:2.3:a:vmware:one_access:21.08.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:vmware:one_access:21.08.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vmware:one_access:21.08.0.1:*:*:*:*:*:*:*
  • VMware/Workspace ONE Access, Identity Manager and vRealize Automationdescription
  • VMware/Workspace One Accessllm-fuzzy
  • VMware/Vrealize Automationllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.