← Back to browse · API

CVE-2022-22960

Severity
HIGH
CVSS
7.8
EPSS
0.36391
Risk score
68.94
CISA KEV
Yes
PoC
No
Published
2022-04-13
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2022-28083, GHSA-8R7C-VJV4-WP6X
Products
VMware:Multiple Products, n/a:VMware Workspace ONE Access, Identity Manager and vRealize Automation Access 21.08.0.1, 21.08.0.0, 20.10.0.1, 20.10.0.0. Identity Manager 3.3.6, 3.3.5, 3.3.4, 3.3.3. vRealize Automation 7.6.
Sources
euvd EUVD-2022-28083
cisa.gov CVE-2022-22960

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.

References