| Package | Affected versions | Patched versions |
|---|---|---|
| cloud foundation | = 3.0= 3.0.1= 3.0.1.1= 3.10= 3.10.1= 3.10.1.1= 3.10.1.2= 3.10.2.1= 3.10.2.2= 3.11= 3.11.0.1= 3.5= 3.5.1= 3.7= 3.7.1= 3.7.2= 3.8= 3.8.1= 3.9= 3.9.1= 4.0= 4.0.1= 4.1= 4.1.0.1= 4.2= 4.2.1= 4.3= 4.3.1 | |
| identity manager | = 3.3.3= 3.3.4= 3.3.5= 3.3.6 | |
| vrealize automation | = 7.6 | |
| vrealize suite lifecycle manager | = 8.0= 8.0.1= 8.1= 8.2= 8.3= 8.4= 8.4.1= 8.6= 8.6.1= 8.6.2= 8.7= 8.8 | |
| workspace one access | = 20.10.0.0= 20.10.0.1= 21.08.0.0= 21.08.0.1 |
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free