VMware Patches Several Vulnerabilities in Multiple Products (VMSA-2022-0021)

On August 2, VMware issued an advisory (VMSA-2022-0021) for ten vulnerabilities across several of its products. The most severe vulnerability addressed is CVE-2022-31656, an authentication bypass vulnerability in VMware Workspace ONE Access, Identity Manager and vRealize Automation that was assigned a CVSSv3 score of 9.8. Notably, this vulnerability could be chained with other vulnerabilities patched in this release to achieve remote code execution. 

Organizations should patch these vulnerabilities as soon as possible. A full breakdown of vulnerable and patched versions of all products can be found on the advisory page.

For more information about the vulnerability, including the availability of patches and Tenable product coverage, please visit our blog.