VMware · Workspace ONE Access and Identity Manager
CVE-2022-22954
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
Qué es
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.
CISA: VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.
Qué hacer
Apply updates per vendor instructions.
Plazo para las agencias federales de EE. UU.: 5 de mayo de 2022
Más fallos explotados de VMware
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 4 mar 2025 | TOCTOU Race Condition | ESXi and Workstation | Crítica 9,3 | 1,6% |
| 4 mar 2025 | Arbitrary Write | ESXi | Alto 8,2 | 1,0% |
| 4 mar 2025 | Information Disclosure | ESXi, Workstation, and Fusion | Alto 7,1 | 1,6% |
| 20 nov 2024 | Heap-Based Buffer Overflow | vCenter Server | Crítica 9,8 | 55% |
| 20 nov 2024 | Privilege Escalation | vCenter Server | Alto 7,5 | 17% |
| 30 jul 2024 | Authentication Bypass | ESXi | Media 6,8 | 27% |
| 17 jul 2024 | Incorrect Default File Permissions Vulnerability | vCenter Server | Media 6,5 | 13% |
| 22 ene 2024 | Out-of-Bounds Write | vCenter Server | Crítica 9,8 | 99,2% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.