Multiple VMware Products Command Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| cloud foundation | = 4.0= 4.0.1 | |
| identity manager | = 3.3.1= 3.3.2= 3.3.3 | |
| identity manager connector | = 3.3.1= 3.3.2= 3.3.3 | |
| one access | = 20.01= 20.10 | |
| vrealize suite lifecycle manager | ≥ 8.0, ≤ 8.2 |
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free