VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.

The VMware Workspace One Access (formerly VMware Identity Manager) application running on the remote host is affected by a remote code execution vulnerability due to server-side template injection. An unauthenticated, remote attacker can exploit this, via a specially crafted message, to execute arbitrary code on the remote host.

The VMware Workspace One Access (formerly VMware Identity Manager) application running on the remote host is affected by the following vulnerabilities:

  - Server-side Template Injection Remote Code Execution Vulnerability (CVE-2022-22954)
  - OAuth2 ACS Authentication Bypass Vulnerabilities (CVE-2022-22955, CVE-2022-22956)
  - JDBC Injection Remote Code Execution Vulnerabilities (CVE-2022-22957, CVE-2022-22958)
  - Cross Site Request Forgery Vulnerability (CVE-2022-22959)
  - Local Privilege Escalation Vulnerability (CVE-2022-22960)
  - Information Disclosure Vulnerability (CVE-2022-22961)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version.

ID	Name	Product	Family	Severity
160182	VMware Workspace One Access / VMware Identity Manager Server-side Template Injection RCE (CVE-2022-22954)	Nessus	CGI abuses	critical
113221	VMware Workspace ONE Access / VMware Identity Manager Server-Side Template Injection	Web App Scanning	Component Vulnerability	critical
159548	VMware Workspace One Access / VMware Identity Manager Multiple Vulnerabilities (VMSA-2022-0011)	Nessus	CGI abuses	critical

Detections

Analytics

CVE-2022-22954

critical

Tenable Plugins

critical

critical

critical