CVE-2022-31660

HIGH

VMware Workspace ONE Access CVE-2022-31660

Title source: metasploit
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-31660. PoCs published by Spencer McIntyre, including Metasploit module exploits/linux/local/vmware_workspace_one_access_certproxy_lpe.

AI-analyzed exploit summary This Metasploit module exploits CVE-2022-31660, a local privilege escalation vulnerability in VMware Workspace ONE Access. It allows the 'horizon' user to escalate to root by modifying a service script and restarting the vmware-certproxy service via sudo.

Description

VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.

Exploits (1)

metasploit WORKING POC GREAT
by Spencer McIntyre · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmware_workspace_one_access_certproxy_lpe.rb

This Metasploit module exploits CVE-2022-31660, a local privilege escalation vulnerability in VMware Workspace ONE Access. It allows the 'horizon' user to escalate to root by modifying a service script and restarting the vmware-certproxy service via sudo.

Classification
Working Poc 100%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: VMware Workspace ONE Access
Auth required
Prerequisites: Access to the 'horizon' user account · Sudo permissions for the 'horizon' user to restart the vmware-certproxy service · Write access to the cert-proxy.sh file
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_misc
https://www.vmware.com/security/advisories/VMSA-2022-0021.html

Scores

CVSS v3 7.8
EPSS 0.0106
EPSS Percentile 60.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (12)
vmware/access_connector 21.08.0.0
vmware/access_connector 21.08.0.1
vmware/access_connector 22.05
vmware/identity_manager 3.3.4
vmware/identity_manager 3.3.5
vmware/identity_manager 3.3.6
vmware/identity_manager_connector 3.3.4
vmware/identity_manager_connector 3.3.5
vmware/identity_manager_connector 3.3.6
vmware/identity_manager_connector 19.03.0.1
... and 2 more
Published Aug 05, 2022
Tracked Since Feb 18, 2026