9.8
Critical
CVE-2022-31689 VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability
Description
VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authenticate to the application using that token.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Workspace ONE Assist | Versions not published |
Other CVEs of VMware Workspace ONE Assist
The 5 CVEs of VMware Workspace ONE Assist →
CVE-2022-31687
VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability
9.8
Critical
CVE-2022-31688
VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability
6.1
Medium
CVE-2022-31685
VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability
9.8
Critical
CVE-2022-31686
VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability
9.8
Critical