CVE-2021-22057

Опубликовано: 20 дек. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass vulnerability. A malicious actor, who has successfully provided first-factor authentication, may be able to obtain second-factor authentication provided by VMware Verify.

Ссылки

https://www.vmware.com/security/advisories/VMSA-2021-0030.html
Patch
Vendor Advisory
https://www.vmware.com/security/advisories/VMSA-2021-0030.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:vmware:workspace_one_access:20.10:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workspace_one_access:20.10.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workspace_one_access:21.08:*:*:*:*:*:*:*

cpe:2.3:a:vmware:workspace_one_access:21.08.0.1:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00498

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-cvrp-6cg2-w64m

CVSS3: 9.8

github

около 4 лет назад

BDU:2022-02327

CVSS3: 7.2

fstec