Skip to content
Sign in
Not rated

CVE-2021-22056 VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF…

Description

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability. A malicious actor with network access may be able to make HTTP requests to arbitrary origins and read the full response.

Affected products and versions

Product Affected versions Fixed in
VMware Workspace ONE Access and Identity Manager Versions not published

Other CVEs of VMware Workspace ONE Access and Identity Manager

The 3 CVEs of VMware Workspace ONE Access and Identity Manager →
CVE-2022-22954 VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability 9.8 Critical CVE-2021-22003 VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443 Not rated
Track this CVE