Home/CVEs/CVE-2022-22960/

CVE-2022-22960 - VMware Multiple Products Privilege Escalation Vulnerability

Project:VMware

Product:Multiple Products

Date Added:2022-04-15Due Date:2022-05-06

Vulnerability Name

VMware Multiple Products Privilege Escalation Vulnerability

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2022-22960