DE · EN

Call us

apiVersion: soultec.ch/v1kind: Postmetadata: name: vmware-security-advisory-2022-021 locale: en labels: author: dario-doerflinger capability/security: 2.16 vendor/vmware: 0.88 annotations: source: blog-content/posts/en/vmware-security-advisory-2022-021.md route: /en/insights/vmware-security-advisory-2022-021/ schema: /nerd/schema/posts.json markdown: /en/insights/vmware-security-advisory-2022-021.mdspec: title: VMware Security Advisory date: 2022-08-05 author: dario-doerflinger locale: en summary: >- VMware has disclosed new vulnerabilities in VMware Security Advisory 2022-0021. They are rated 4.7 to 9.8 on the CVSS scale. capabilities: [security] vendors: [vmware] hero: /blog-assets/vmware-security-advisory-2022-021/hero.webp migrated: 2026-08-24 translationReviewed: false draft: false sections: - body: | VMware has disclosed new vulnerabilities. They are covered by VMware Security Advisory 2022 0021 and rated 4.7 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be patched as soon as possible. - heading:

VMSA-2022-021

body: | The disclosed vulnerability ([CVE-2022-31656](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31656)) lets an attacker with network access obtain administrator rights without logging in. Workspace ONE Access, Identity Manager and vRealize Automation are affected. Further detail, workarounds and patch links are at [VMware](https://www.vmware.com/security/advisories/VMSA-2022-0021.html). VMware reports no known attacks so far. With a published vulnerability that can change within hours. Both soulTec and VMware recommend patching the affected systems immediately. If you need a hand, [we are here](https://soultec.ch/contact-us/).status: corpus: 267 alsoLike: - {ref: posts/vmware-security-advisory, score: 1.00} - {ref: posts/vmware-security-advisory-vmsa-2024-0012, score: 1.00} - {ref: solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance, score: 0.73}

{ "apiVersion": "soultec.ch/v1", "kind": "Post", "metadata": { "name": "vmware-security-advisory-2022-021", "locale": "en", "labels": { "author": "dario-doerflinger", "capability/security": "2.16", "vendor/vmware": "0.88" }, "annotations": { "source": "blog-content/posts/en/vmware-security-advisory-2022-021.md", "route": "/en/insights/vmware-security-advisory-2022-021/", "schema": "/nerd/schema/posts.json", "markdown": "/en/insights/vmware-security-advisory-2022-021.md" } }, "spec": { "title": "VMware Security Advisory", "date": "2022-08-05", "author": "dario-doerflinger", "locale": "en", "summary": "VMware has disclosed new vulnerabilities in VMware Security Advisory 2022-0021. They are rated 4.7 to 9.8 on the CVSS scale.", "capabilities": [ "security" ], "vendors": [ "vmware" ], "hero": "/blog-assets/vmware-security-advisory-2022-021/hero.webp", "migrated": "2026-08-24", "translationReviewed": false, "draft": false }, "sections": [ { "body": "VMware has disclosed new vulnerabilities. They are covered by VMware Security Advisory 2022 0021 and rated 4.7 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be patched as soon as possible." }, { "heading": "

VMSA-2022-021

", "body": "The disclosed vulnerability ([CVE-2022-31656](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31656)) lets an attacker with network access obtain administrator rights without logging in. Workspace ONE Access, Identity Manager and vRealize Automation are affected. Further detail, workarounds and patch links are at [VMware](https://www.vmware.com/security/advisories/VMSA-2022-0021.html).\n\nVMware reports no known attacks so far. With a published vulnerability that can change within hours. Both soulTec and VMware recommend patching the affected systems immediately. If you need a hand, [we are here](https://soultec.ch/contact-us/)." } ], "status": { "corpus": 267, "alsoLike": [ { "ref": "posts/vmware-security-advisory", "score": "1.00" }, { "ref": "posts/vmware-security-advisory-vmsa-2024-0012", "score": "1.00" }, { "ref": "solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance", "score": "0.73" } ] }}

apiVersion = "soultec.ch/v1"kind = "Post"[metadata]name = "vmware-security-advisory-2022-021"locale = "en"[metadata.labels]author = "dario-doerflinger""capability/security" = "2.16""vendor/vmware" = "0.88"[metadata.annotations]source = "blog-content/posts/en/vmware-security-advisory-2022-021.md"route = "/en/insights/vmware-security-advisory-2022-021/"schema = "/nerd/schema/posts.json"markdown = "/en/insights/vmware-security-advisory-2022-021.md"[spec]title = "VMware Security Advisory"date = 2022-08-05author = "dario-doerflinger"locale = "en"summary = "VMware has disclosed new vulnerabilities in VMware Security Advisory 2022-0021. They are rated 4.7 to 9.8 on the CVSS scale."capabilities = ["security"]vendors = ["vmware"]hero = "/blog-assets/vmware-security-advisory-2022-021/hero.webp"migrated = 2026-08-24translationReviewed = falsedraft = false[[sections]]body = "VMware has disclosed new vulnerabilities. They are covered by VMware Security Advisory 2022 0021 and rated 4.7 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be patched as soon as possible."[[sections]]heading = "

VMSA-2022-021

"body = '''The disclosed vulnerability ([CVE-2022-31656](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31656)) lets an attacker with network access obtain administrator rights without logging in. Workspace ONE Access, Identity Manager and vRealize Automation are affected. Further detail, workarounds and patch links are at [VMware](https://www.vmware.com/security/advisories/VMSA-2022-0021.html).VMware reports no known attacks so far. With a published vulnerability that can change within hours. Both soulTec and VMware recommend patching the affected systems immediately. If you need a hand, [we are here](https://soultec.ch/contact-us/).'''[status]corpus = 267[[status.alsoLike]]ref = "posts/vmware-security-advisory"score = "1.00"[[status.alsoLike]]ref = "posts/vmware-security-advisory-vmsa-2024-0012"score = "1.00"[[status.alsoLike]]ref = "solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance"score = "0.73"

<?xml version="1.0" encoding="UTF-8"?><manifest kind="Post"> <apiVersion>soultec.ch/v1</apiVersion> <metadata> <name>vmware-security-advisory-2022-021</name> <locale>en</locale> <labels> <author>dario-doerflinger</author> <entry key="capability/security">2.16</entry> <entry key="vendor/vmware">0.88</entry> </labels> <annotations> <source>blog-content/posts/en/vmware-security-advisory-2022-021.md</source> <route>/en/insights/vmware-security-advisory-2022-021/</route> <schema>/nerd/schema/posts.json</schema> <markdown>/en/insights/vmware-security-advisory-2022-021.md</markdown> </annotations> </metadata> <spec> <title>VMware Security Advisory</title> <date>2022-08-05</date> <author>dario-doerflinger</author> <locale>en</locale> <summary>VMware has disclosed new vulnerabilities in VMware Security Advisory 2022-0021. They are rated 4.7 to 9.8 on the CVSS scale.</summary> <capabilities> <item>security</item> </capabilities> <vendors> <item>vmware</item> </vendors> <hero>/blog-assets/vmware-security-advisory-2022-021/hero.webp</hero> <migrated>2026-08-24</migrated> <translationReviewed>false</translationReviewed> <draft>false</draft> </spec> <sections> <section> <body>VMware has disclosed new vulnerabilities. They are covered by VMware Security Advisory 2022 0021 and rated 4.7 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be patched as soon as possible.</body> </section> <section> <heading>

VMSA-2022-021

</heading> <body>The disclosed vulnerability ([CVE-2022-31656](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31656)) lets an attacker with network access obtain administrator rights without logging in. Workspace ONE Access, Identity Manager and vRealize Automation are affected. Further detail, workarounds and patch links are at [VMware](https://www.vmware.com/security/advisories/VMSA-2022-0021.html).VMware reports no known attacks so far. With a published vulnerability that can change within hours. Both soulTec and VMware recommend patching the affected systems immediately. If you need a hand, [we are here](https://soultec.ch/contact-us/). </body> </section> </sections> <status> <corpus>267</corpus> <alsoLike> <item> <ref>posts/vmware-security-advisory</ref> <score>1.00</score> </item> <item> <ref>posts/vmware-security-advisory-vmsa-2024-0012</ref> <score>1.00</score> </item> <item> <ref>solutions/vmware/vmware-cloud-foundation/addon/advanced-cyber-compliance</ref> <score>0.73</score> </item> </alsoLike> </status></manifest>

Post · 2022-08-05

VMware Security Advisory

VMware has disclosed new vulnerabilities in VMware Security Advisory 2022-0021. They are rated 4.7 to 9.8 on the CVSS scale.

2022-08-05Date

Dario DörflingerAuthor

1Min read

Topics Security 2.16

Vendors VMware 0.88

This post is from 2022. It stays online because people still look for it, but it describes the products as they were then.

VMware has disclosed new vulnerabilities. They are covered by VMware Security Advisory 2022 0021 and rated 4.7 to 9.8 on the CVSS scale. The most severe one (CVSS 9.8) should be patched as soon as possible.

VMSA-2022-021

The disclosed vulnerability (CVE-2022-31656) lets an attacker with network access obtain administrator rights without logging in. Workspace ONE Access, Identity Manager and vRealize Automation are affected. Further detail, workarounds and patch links are at VMware.

VMware reports no known attacks so far. With a published vulnerability that can change within hours. Both soulTec and VMware recommend patching the affected systems immediately. If you need a hand, we are here.

post 1.00