CVE-2022-31701

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Dec 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-317029.8vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API. A malicious actor with network acceCVE-2022-317037.5The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operatiCVE-2022-317049.8The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into seCVE-2022-317058.2VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor wiCVE-2022-317069.8The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operatiCVE-2022-317077.2vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the ImpoCVE-2022-317084.9vRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the ModCVE-2022-31717.5A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of CVE-2022-317107.5vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization oCVE-2022-317115.3VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sensitive session and aCVE-2022-31728.2A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could CVE-2022-31734.3Improper Authentication in GitHub repository snipe/snipe-it prior to 6.0.10.