.. / CVE-2022-22972

• Auth Bypass
• Nuclei
• Web

Exploit for VMware Workspace ONE Access/Identity Manager/vRealize Automation - Authentication Bypass (CVE-2022-22972)

Description:

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.

Nuclei Template

View the template here CVE-2022-22972.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-22972.yaml

References: