References https://nvd.nist.gov/vuln/detail/CVE-2022-22972 https://www.vmware.com/security/advisories/VMSA-2022-0014.html https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23630 https://www.rapid7.com/blog/post/2022/05/19/cve-2022-22972-critical-authentication-bypass-in-vmware-workspace-one-access-identity-manager-and-vrealize-automation/ https://www.nopsec.com/resources/just-in-time/cve-2022-22972-vmware-workspace-one-access-authentication-bypass/ https://horizon3.ai/attack-research/attack-blogs/vmware-authentication-bypass-vulnerability-cve-2022-22972-technical-deep-dive/ https://github.com/horizon3ai/CVE-2022-22972 https://www.coresecurity.com/core-labs/exploits/vmware-workspace-one-access-localpasswordauthadapter-authentication-bypass https://www.cybersecuritydive.com/news/vmware-vulnerability-authentication/628721/ https://www.cve.org/CVERecord?id=CVE-2022-22972
Related VulnerabilitiesVMware ESXi /sdk 默认口令漏洞WordPress TI WooCommerce Wishlist /wp-json/wc/v3/wishlist/get_products SQL 注入漏洞(CVE-2024-43917)PrestaShop ProductsAlert /module/productsalert/AjaxProcess SQL 注入漏洞(CVE-2024-36683)PoCCVE-2024-13225: ECT Home Page Products - Reflected XSSPoCCVE-2022-31678: VMWare Cloud Foundation NSX-V - XML External Entity (XXE)PoCCVE-2018-6961: VMware NSX SD-WAN Edge - Command Injection(CVE-2025-41252) VMware NSX未认证的用户名枚举漏洞(CVE-2025-41246) VMware Tools for Windows授权不当漏洞(CVE-2025-41250)VMware vCenter SMTP头部注入漏洞Vmware Spring Security 逻辑缺陷漏洞Vmware Spring Framework 逻辑缺陷漏洞CVE-2023-20888: VMware Aria Operations for Networks - Remote Code ExecutionPoCCVE-2021-21972: VMware vSphere Client (HTML5) - Remote Code Execution