CVE-2022-22960
🔥 Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
Vulnerability Description
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.
Affected Platforms (CPE)
📦
Vmware
Cloud Foundation
>= 3.0 and < 5.0
📦
Vmware
Identity Manager
= 3.3.3= 3.3.4= 3.3.5= 3.3.6
📦
Vmware
Vrealize Automation
= 7.6
📦
Vmware
Vrealize Suite Lifecycle Manager
>= 8.0 and < 9.0