CVEvulnerability

CVE-2021-22056

7.5 HIGH Published 2021-12-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-12-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-918

Description

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability. A malicious actor with network access may be able to make HTTP requests to arbitrary origins and read the full response.

Affected configurations

• vmware identity manager 3.3.3 • vmware identity manager 3.3.4 • vmware identity manager 3.3.5 • vmware vrealize automation (>= 8.0 <= 8.6) • vmware vrealize automation 7.6 • vmware workspace one access 20.10 • vmware workspace one access 20.10.01 • vmware workspace one access 21.08 • vmware workspace one access 21.08.01

Related

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References