Firetruck

CVE-2022-22960

KEV

VMware Multiple Products Privilege Escalation Vulnerability

View CVE record →
Vendor / Project
VMware
Product
Multiple Products
Date added
Apr 15, 2022
Due date
May 6, 2022
Known ransomware use
Unknown
CWEs
CWE-250

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.

Required action

Apply updates per vendor instructions.

Notes