| Package | Affected versions | Patched versions |
|---|---|---|
| identity manager | = 3.3.3= 3.3.4= 3.3.5 | |
| vrealize automation | = 7.6≥ 8.0, ≤ 8.6 | |
| workspace one access | = 20.10= 20.10.01= 21.08= 21.08.01 |
VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability. A malicious actor with network access may be able to make HTTP requests to arbitrary origins and read the full response.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free