Actively exploited in the wild

VMware Multiple Products Privilege Escalation Vulnerability

VMware - Multiple Products · Listed in the CISA KEV since 2022-04-15. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2022-22960

HighCVSS 7.8KEV

Published: 13/04/2022(UTC)Updated: 17/06/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Summary

A vulnerability in VMware Workspace ONE Access, Identity Manager and vRealize Automation due to improper permissions in support scripts. A local attacker can escalate privileges to root.

Risk Assessment

It allows a local attacker to gain root privileges on the appliance, potentially leading to full compromise of the service.

Recommendation

Apply the patches provided by VMware (VMSA-2022-0011) and restrict local access to the appliances.

Other vulnerabilities in VMware Workspace ONE Access

CVE-2020-4006CriticalActively exploited
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability.

Original NVD description (English source)

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.