CVE-2022-31665
Published: 05 August 2022
Summary
CVE-2022-31665 is a high-severity Injection (CWE-74) vulnerability in Vmware Identity Manager Connector. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 13.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
VMware Workspace ONE Access, Identity Manager, and vRealize Automation contain a remote code execution vulnerability identified as CVE-2022-31665. The flaw, assigned a CVSS v3.1 score of 7.2 and mapped to CWE-74, permits an attacker to execute arbitrary code with impacts to confidentiality, integrity, and availability when network-reachable administrative access is present.
A malicious actor with both administrator credentials and network access can trigger the remote code execution condition against the affected VMware components.
The issue was published in VMware security advisory VMSA-2022-0021, which addresses remediation for the listed products.
EPSS probability for the CVE reached a peak of 0.0619 before receding to the current value of 0.0305.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-53099
Vulnerability details
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Developer assessments and testing (including injection-focused techniques) identify improper neutralization of special elements, and the verifiable flaw remediation corrects them pre-deployment.
Identifies indicators of injection attacks (command, SQL, LDAP, etc.) via anomaly and attack monitoring.