CVE-2022-31686 in Workspace ONE Assist

الملخص

بحسب MITRE • 10/11/2022

VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• حجز: 25/05/2022
• إفشاء: 10/11/2022
• الاعتدال: تمت الموافقة
• إدخال: VDB-213332
• CPE: جاهز
• CWE: CWE-287 (مؤكد)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00929
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-31686
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-31686
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-31686/