9.8
Critical
CVE-2022-31686 VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability
Description
VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware Workspace ONE Assist | Versions not published |
Other CVEs of VMware Workspace ONE Assist
The 5 CVEs of VMware Workspace ONE Assist →
CVE-2022-31687
VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability
9.8
Critical
CVE-2022-31688
VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability
6.1
Medium
CVE-2022-31689
VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability
9.8
Critical
CVE-2022-31685
VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability
9.8
Critical