CVE-2022-22960: VMware Multiple Products Privilege Escalation Vulnerability

Vulnerability summary

CVE-2022-22960 is a high (CVSS 7.8) vulnerability in VMware Multiple Products. It is known to be exploited: CISA lists it, first on 15-04-2022. EPSS estimates a 35.52% chance of exploitation in the next 30 days, higher than 98.4% of scored vulnerabilities. 4 public exploits are recorded.

Timeline

1. 13-04-2022
   PublishedVulnerability first disclosed.
2. 15-04-2022
   Added to CISA KEVVMware Multiple Products Privilege Escalation Vulnerability
3. 06-05-2022
   CISA remediation dueApply updates per vendor instructions.
4. 21-10-2025
   Last modifiedVulnerability information updated.

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.

• CWE-732Incorrect Permission Assignment for Critical ResourceThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.