OpenCVE

VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel
Vmware	Access Cloud Foundation Identity Manager Connector

Configuration 1 [-]

OR	cpe:2.3:a:vmware:access:21.08.0.0:::::linux::
	cpe:2.3:a:vmware:access:21.08.0.1:::::linux::
	cpe:2.3:a:vmware:access:22.09.0.0:::::linux::
	cpe:2.3:a:vmware:cloud_foundation::::::::

Configuration 2 [-]

AND

cpe:2.3:a:vmware:identity_manager_connector:3.3.6:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.vmware.com/security/advisories/VMSA-2022-0032.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: vmware

Published: 2022-12-14T00:00:00

Updated: 2024-08-03T07:26:01.295Z

Reserved: 2022-05-25T00:00:00

Link: CVE-2022-31701

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-12-14T19:15:12.950

Modified: 2024-11-21T07:05:10.017

Link: CVE-2022-31701

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vmware:access:21.08.0.0:*:*:*:*:linux:*:*", "matchCriteriaId": "58F8802F-BE7F-4908-BD92-2576238798D6", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:access:21.08.0.1:*:*:*:*:linux:*:*", "matchCriteriaId": "B7145A8C-7716-4839-8707-05765687447B", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:access:22.09.0.0:*:*:*:*:linux:*:*", "matchCriteriaId": "71EE79BE-E945-4BD7-99D7-0CC2EE4C9CCC", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*", "matchCriteriaId": "067E304C-26C2-4527-AE53-91B43DA33303", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vmware:identity_manager_connector:3.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "004A7497-2D06-4D8D-9C82-C0D774101326", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3."}, {"lang": "es", "value": "VMware Workspace ONE Access and Identity Manager contiene una vulnerabilidad de autenticaci\u00f3n rota. VMware ha evaluado la gravedad de este problema en el rango de gravedad moderada con una puntuaci\u00f3n base CVSSv3 m\u00e1xima de 5.3."}], "id": "CVE-2022-31701", "lastModified": "2024-11-21T07:05:10.017", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-12-14T19:15:12.950", "references": [{"source": "security@vmware.com", "tags": ["Vendor Advisory"], "url": "https://www.vmware.com/security/advisories/VMSA-2022-0032.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.vmware.com/security/advisories/VMSA-2022-0032.html"}], "sourceIdentifier": "security@vmware.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "nvd@nist.gov", "type": "Primary"}]}