PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Understanding CVE-2022-22972 (VMWare Workspace One Access Auth Bypass)

slcyber.io | research | CVE-2022-22972 | #vulnerability-research | #vmware | #auth-bypass | #cve-2022-22972
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# Understanding CVE-2022-22972 (VMWare Workspace One Access Auth Bypass) Get research alerts Share on social ) May 27, 2022 10 min read ### Table of Contents TOC Element Intro Hunting for the...
CVE
CVE-2022-22972
Published
Collected

Related coverage

vulnerability · horizon3.ai
VMware Authentication Bypass Vulnerability (CVE-2022-22972) Technical Deep Dive
Technical deep dive into VMware’s recently patched authentication bypass vulnerability allowing an attacker to login as any known local user.
vulnerability · vercel.com
Postmortem on Next.js Middleware bypass
Last week, we published CVE-2025-29927 and patched a critical severity vulnerability in Next.js. Here’s our post-incident analysis and next steps.
vulnerability · horizon3.ai
[CVE-2020-3952] Compromising vCenter via SAML Certificates
A common attack path that Horizon3 has identified across many of its customers is abusing access to the VMware vCenter Identity Provider (IdP) certificate.
vulnerability · horizon3.ai
POC CVE-2021-21972
Write the file supplied in the –file argument to the location specified in the –path argument. The file will be written in the context of the vsphere-ui user.
research · slcyber.io
How practical is 100k requests per second? Introducing h3fuzz
Can HTTP/3 really give you 100k requests per second for content discovery? We tested it in a fork of ffuf and are releasing h3fuzz, a web UI for fuzzing.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
Back