VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10...
High severity
Unreviewed
Published
Dec 21, 2021
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Description
Published by the National Vulnerability Database
Dec 20, 2021
Published to the GitHub Advisory Database
Dec 21, 2021
Last updated
Feb 1, 2023
VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability. A malicious actor with network access may be able to make HTTP requests to arbitrary origins and read the full response.
References