Security Advisory
CVE-2022-22955
9.8
CRITICAL
Vulnerability Description
VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework.
Published Date
April 13, 2022
Official Source
NIST NVD Advisory