CVE-2022-22973 - Vulnerability Details

Vendors	Products
Linux	Linux Kernel
Vmware	Cloud Foundation Identity Manager Vrealize Suite Lifecycle Manager Workspace One Access

Link	Providers
https://www.vmware.com/security/advisories/VMSA-2022-0014.html

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "VMware Workspace ONE Access and Identity Manager.", "vendor": "n/a", "versions": [{"status": "affected", "version": "Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3."}]}], "descriptions": [{"lang": "en", "value": "VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'."}], "problemTypes": [{"descriptions": [{"description": "Privilege escalation", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-05-20T20:18:27", "orgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "shortName": "vmware"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.vmware.com/security/advisories/VMSA-2022-0014.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@vmware.com", "ID": "CVE-2022-22973", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "VMware Workspace ONE Access and Identity Manager.", "version": {"version_data": [{"version_value": "Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3."}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Privilege escalation"}]}]}, "references": {"reference_data": [{"name": "https://www.vmware.com/security/advisories/VMSA-2022-0014.html", "refsource": "MISC", "url": "https://www.vmware.com/security/advisories/VMSA-2022-0014.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T03:28:42.587Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.vmware.com/security/advisories/VMSA-2022-0014.html"}]}]}, "cveMetadata": {"assignerOrgId": "dcf2e128-44bd-42ed-91e8-88f912c1401d", "assignerShortName": "vmware", "cveId": "CVE-2022-22973", "datePublished": "2022-05-20T20:18:27", "dateReserved": "2022-01-10T00:00:00", "dateUpdated": "2024-08-03T03:28:42.587Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : VMware Workspace ONE Access and Identity Manager. (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3. (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Privilege escalation (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2022-05-20T20:18:27 (string)

orgId : dcf2e128-44bd-42ed-91e8-88f912c1401d (string)

shortName : vmware (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://www.vmware.com/security/advisories/VMSA-2022-0014.html (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : security@vmware.com (string)

ID : CVE-2022-22973 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : VMware Workspace ONE Access and Identity Manager. (string)

version : { »

version_data : [ »

0 : { »

version_value : Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3. (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Privilege escalation (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.vmware.com/security/advisories/VMSA-2022-0014.html (string)

refsource : MISC (string)

url : https://www.vmware.com/security/advisories/VMSA-2022-0014.html (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T03:28:42.587Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://www.vmware.com/security/advisories/VMSA-2022-0014.html (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : dcf2e128-44bd-42ed-91e8-88f912c1401d (string)

assignerShortName : vmware (string)

cveId : CVE-2022-22973 (string)

datePublished : 2022-05-20T20:18:27 (string)

dateReserved : 2022-01-10T00:00:00 (string)

dateUpdated : 2024-08-03T03:28:42.587Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vmware:identity_manager:3.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "97D98937-489B-4AA5-B99E-9AB639C582CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:identity_manager:3.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "0E93CB5E-CB4A-474A-9901-2E098928C489", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:identity_manager:3.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "2A215A7D-F644-41DE-AB4E-69145DA48F9F", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:identity_manager:3.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "5EBB8190-2101-4EE5-844E-B46E7FB78FD7", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:workspace_one_access:20.10.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "639F6029-DE62-49BD-A767-C5D499389C37", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:workspace_one_access:20.10.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "88AD029C-7707-4F1E-BE7F-2DE27D384538", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:workspace_one_access:21.08.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "57375AD7-8042-472F-B49E-653C77EAFA48", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:workspace_one_access:21.08.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "AC3DC465-1FA7-4F5B-9A9A-12F8FB4CE146", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "8BA79AC0-A0CC-4EE6-AEF5-9B8C8EA2C9F1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "38EB0C0C-56CF-4A8F-A36F-E0E180B9059E", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:cloud_foundation:4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "A54544F5-5929-4609-A91C-FCA0FDBFE862", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:cloud_foundation:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "CA6D6348-E71A-4DA4-AC84-51397B2461A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:cloud_foundation:4.1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "C8EC0B43-8667-45D6-BF97-03DDFFAD2AF9", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:cloud_foundation:4.2:*:*:*:*:*:*:*", "matchCriteriaId": "E841E8EF-9500-4937-BAC4-8AB76C96A3EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:cloud_foundation:4.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "DC4C5700-1AFE-49F6-AC92-09F2349345ED", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:cloud_foundation:4.3:*:*:*:*:*:*:*", "matchCriteriaId": "B23891F3-08B7-480B-9B83-81381E33212F", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:cloud_foundation:4.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "3EC07793-6DB1-4ACD-976D-A370FFAE505A", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "E3318D91-40AC-4649-8FCD-4557C8F934B9", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "A06C29AB-1EAF-43EF-96C3-9E3468911B2F", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.1:*:*:*:*:*:*:*", "matchCriteriaId": "43723EC2-295E-4AF7-B654-70F9E42F4807", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:*:*:*:*:*:*:*", "matchCriteriaId": "CFB84C30-EE5D-4C15-A74E-7B2B3E0DED4D", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:patch1:*:*:*:*:*:*", "matchCriteriaId": "FD4A0BCE-E22E-419E-9CC0-7D535CC49E02", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:patch2:*:*:*:*:*:*", "matchCriteriaId": "80868C66-E615-47E3-BA67-152FE833A10B", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:patch3:*:*:*:*:*:*", "matchCriteriaId": "7DF3AFD0-1DDD-4F9D-BD33-85978CF101ED", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.3:*:*:*:*:*:*:*", "matchCriteriaId": "E80F36FA-EE84-47BE-95EB-17B49FBCC86F", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.3:patch1:*:*:*:*:*:*", "matchCriteriaId": "85854D70-E8A1-4AD9-872B-8D9BEEB7FAFB", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.3:patch2:*:*:*:*:*:*", "matchCriteriaId": "9CF575E5-0FB4-4EC6-AE02-0565A976B98B", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.3:patch3:*:*:*:*:*:*", "matchCriteriaId": "A99C818B-7215-4422-87C4-D500F6931442", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4:*:*:*:*:*:*:*", "matchCriteriaId": "3617E4AC-630F-4AF2-855A-872AD2ECC3A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4:patch1:*:*:*:*:*:*", "matchCriteriaId": "969F3DA5-A0C3-4F30-B786-46BCC280D6D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "E5B8D22C-1C36-4125-9C58-1C2472EF64F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4.1:patch1:*:*:*:*:*:*", "matchCriteriaId": "356479A9-C5F9-4714-A29A-464FE738F71D", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4.1:patch2:*:*:*:*:*:*", "matchCriteriaId": "95D8DEAC-50BF-4B1B-B3EC-E9D54EEC0755", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4.1:patch3:*:*:*:*:*:*", "matchCriteriaId": "B16A6A96-C904-416F-A4D3-FB22CAC07610", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6:*:*:*:*:*:*:*", "matchCriteriaId": "73825FF7-AFD1-4948-ABB7-0E73D4AC72C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6:patch1:*:*:*:*:*:*", "matchCriteriaId": "3BAC746E-7897-4ED0-8120-2953A5CECF1D", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "A07377B1-9536-4EDE-AA25-FAD474855711", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "D0DF26D0-EBCD-4E35-9218-74B56DCB7A1C", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.7:*:*:*:*:*:*:*", "matchCriteriaId": "F065F309-E25C-4CB2-85DD-98ED3648B069", "vulnerable": true}, {"criteria": "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.8:*:*:*:*:*:*:*", "matchCriteriaId": "1E88B150-4BB0-40FC-9333-737C97BADE09", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'."}, {"lang": "es", "value": "VMware Workspace ONE Access y Identity Manager contienen una vulnerabilidad de escalada de privilegios. Un actor malicioso con acceso local puede escalar los privilegios a \"root\""}], "id": "CVE-2022-22973", "lastModified": "2024-11-21T06:47:43.310", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-05-20T21:15:09.893", "references": [{"source": "security@vmware.com", "tags": ["Vendor Advisory"], "url": "https://www.vmware.com/security/advisories/VMSA-2022-0014.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.vmware.com/security/advisories/VMSA-2022-0014.html"}], "sourceIdentifier": "security@vmware.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:vmware:identity_manager:3.3.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 97D98937-489B-4AA5-B99E-9AB639C582CA (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:vmware:identity_manager:3.3.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 0E93CB5E-CB4A-474A-9901-2E098928C489 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:vmware:identity_manager:3.3.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 2A215A7D-F644-41DE-AB4E-69145DA48F9F (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:vmware:identity_manager:3.3.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 5EBB8190-2101-4EE5-844E-B46E7FB78FD7 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:vmware:workspace_one_access:20.10.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 639F6029-DE62-49BD-A767-C5D499389C37 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:vmware:workspace_one_access:20.10.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 88AD029C-7707-4F1E-BE7F-2DE27D384538 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:vmware:workspace_one_access:21.08.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 57375AD7-8042-472F-B49E-653C77EAFA48 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:vmware:workspace_one_access:21.08.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : AC3DC465-1FA7-4F5B-9A9A-12F8FB4CE146 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:linux:linux_kernel:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8BA79AC0-A0CC-4EE6-AEF5-9B8C8EA2C9F1 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 38EB0C0C-56CF-4A8F-A36F-E0E180B9059E (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:vmware:cloud_foundation:4.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : A54544F5-5929-4609-A91C-FCA0FDBFE862 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:vmware:cloud_foundation:4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : CA6D6348-E71A-4DA4-AC84-51397B2461A2 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:vmware:cloud_foundation:4.1.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : C8EC0B43-8667-45D6-BF97-03DDFFAD2AF9 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:vmware:cloud_foundation:4.2:*:*:*:*:*:*:* (string)

matchCriteriaId : E841E8EF-9500-4937-BAC4-8AB76C96A3EA (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:vmware:cloud_foundation:4.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : DC4C5700-1AFE-49F6-AC92-09F2349345ED (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:vmware:cloud_foundation:4.3:*:*:*:*:*:*:* (string)

matchCriteriaId : B23891F3-08B7-480B-9B83-81381E33212F (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:vmware:cloud_foundation:4.3.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 3EC07793-6DB1-4ACD-976D-A370FFAE505A (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0:*:*:*:*:*:*:* (string)

matchCriteriaId : E3318D91-40AC-4649-8FCD-4557C8F934B9 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : A06C29AB-1EAF-43EF-96C3-9E3468911B2F (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 43723EC2-295E-4AF7-B654-70F9E42F4807 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:*:*:*:*:*:*:* (string)

matchCriteriaId : CFB84C30-EE5D-4C15-A74E-7B2B3E0DED4D (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:patch1:*:*:*:*:*:* (string)

matchCriteriaId : FD4A0BCE-E22E-419E-9CC0-7D535CC49E02 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:patch2:*:*:*:*:*:* (string)

matchCriteriaId : 80868C66-E615-47E3-BA67-152FE833A10B (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:patch3:*:*:*:*:*:* (string)

matchCriteriaId : 7DF3AFD0-1DDD-4F9D-BD33-85978CF101ED (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.3:*:*:*:*:*:*:* (string)

matchCriteriaId : E80F36FA-EE84-47BE-95EB-17B49FBCC86F (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.3:patch1:*:*:*:*:*:* (string)

matchCriteriaId : 85854D70-E8A1-4AD9-872B-8D9BEEB7FAFB (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.3:patch2:*:*:*:*:*:* (string)

matchCriteriaId : 9CF575E5-0FB4-4EC6-AE02-0565A976B98B (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.3:patch3:*:*:*:*:*:* (string)

matchCriteriaId : A99C818B-7215-4422-87C4-D500F6931442 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 3617E4AC-630F-4AF2-855A-872AD2ECC3A7 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4:patch1:*:*:*:*:*:* (string)

matchCriteriaId : 969F3DA5-A0C3-4F30-B786-46BCC280D6D4 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : E5B8D22C-1C36-4125-9C58-1C2472EF64F8 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4.1:patch1:*:*:*:*:*:* (string)

matchCriteriaId : 356479A9-C5F9-4714-A29A-464FE738F71D (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4.1:patch2:*:*:*:*:*:* (string)

matchCriteriaId : 95D8DEAC-50BF-4B1B-B3EC-E9D54EEC0755 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.4.1:patch3:*:*:*:*:*:* (string)

matchCriteriaId : B16A6A96-C904-416F-A4D3-FB22CAC07610 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 73825FF7-AFD1-4948-ABB7-0E73D4AC72C2 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6:patch1:*:*:*:*:*:* (string)

matchCriteriaId : 3BAC746E-7897-4ED0-8120-2953A5CECF1D (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6.1:*:*:*:*:*:*:* (string)

matchCriteriaId : A07377B1-9536-4EDE-AA25-FAD474855711 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.6.2:*:*:*:*:*:*:* (string)

matchCriteriaId : D0DF26D0-EBCD-4E35-9218-74B56DCB7A1C (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.7:*:*:*:*:*:*:* (string)

matchCriteriaId : F065F309-E25C-4CB2-85DD-98ED3648B069 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 1E88B150-4BB0-40FC-9333-737C97BADE09 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'. (string)

}

1 : { »

lang : es (string)

value : VMware Workspace ONE Access y Identity Manager contienen una vulnerabilidad de escalada de privilegios. Un actor malicioso con acceso local puede escalar los privilegios a "root" (string)

}

]

id : CVE-2022-22973 (string)

lastModified : 2024-11-21T06:47:43.310 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : LOCAL (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 7.2 (number)

confidentialityImpact : COMPLETE (string)

integrityImpact : COMPLETE (string)

vectorString : AV:L/AC:L/Au:N/C:C/I:C/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 10 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-05-20T21:15:09.893 (string)

references : [ »

0 : { »

source : security@vmware.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.vmware.com/security/advisories/VMSA-2022-0014.html (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.vmware.com/security/advisories/VMSA-2022-0014.html (string)

}

]

sourceIdentifier : security@vmware.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object