CVE-2022-22972
CRITICAL EXPLOITED NUCLEIVMware Identity Manager Workspace ONE Access and vRealize Automation - Authentication Bypass
Title source: llmExploitation Summary
CVE-2022-22972 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 4 public exploits from researchers including horizon3ai, xk4ng, bengisugun. A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC exploits CVE-2022-22972, an authentication bypass vulnerability in VMware Workspace ONE, vIDM, and vRealize Automation 7.6. It manipulates the Host header in an HTTP POST request to bypass authentication and obtain a valid HZN cookie.
Description
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.
Exploits (4)
This PoC exploits CVE-2022-22972, an authentication bypass vulnerability in VMware Workspace ONE, vIDM, and vRealize Automation 7.6. It manipulates the Host header in an HTTP POST request to bypass authentication and obtain a valid HZN cookie.
This repository contains a Go-based proof-of-concept exploit for CVE-2022-22972, an authentication bypass vulnerability in VMware. The exploit automates the process of bypassing authentication by manipulating login form parameters and cookies.
This repository contains an IOC (Indicators of Compromise) list related to CVE-2022-22972, including IP addresses, hashes, and domains. It does not include exploit code or technical details for exploitation.
This repository contains a functional exploit tool for multiple VMware vCenter vulnerabilities, including CVE-2022-22972, CVE-2021-21972, CVE-2021-21985, CVE-2021-22005, and Log4j (CVE-2021-44228). It provides command execution, file upload, and reverse shell capabilities.
Nuclei Templates (1)
http.favicon.hash:-1250474341
app="vmware-Workspace-ONE-Access" || app="vmware-Identity-Manager" || app="vmware-vRealize" || icon_hash=-1250474341 || app="vmware-workspace-one-access" || app="vmware-identity-manager" || app="vmware-vrealize"
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H