Description
VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| VMware Workspace ONE Access and Identity Manager | n/a / VMware Workspace ONE Access and Identity Manager | Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3. | affected |