VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.
2020-11-23T22:15:12.663
2025-04-02T20:22:15.380
Analyzed
CVSSv3.1: 9.1 (CRITICAL)
AV:N/AC:L/Au:S/C:C/I:C/A:C
8.0
10.0
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | vmware | identity_manager | 3.3.1 | Yes |
| Application | vmware | identity_manager | 3.3.2 | Yes |
| Application | vmware | identity_manager | 3.3.3 | Yes |
| Application | vmware | identity_manager_connector | 3.3.1 | Yes |
| Application | vmware | identity_manager_connector | 3.3.2 | Yes |
| Application | vmware | one_access | 20.01 | Yes |
| Application | vmware | one_access | 20.10 | Yes |
| Operating System | linux | linux_kernel | - | No |
| Application | vmware | identity_manager_connector | 3.3.1 | Yes |
| Application | vmware | identity_manager_connector | 3.3.2 | Yes |
| Application | vmware | identity_manager_connector | 3.3.3 | Yes |
| Operating System | microsoft | windows | - | No |
| Application | vmware | cloud_foundation | 4.0 | Yes |
| Application | vmware | cloud_foundation | 4.0.1 | Yes |
| Application | vmware | vrealize_suite_lifecycle_manager | ≤ 8.2 | Yes |