PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Encrypting our way to SSRF in VMWare Workspace One UEM (CVE-2021-22054)

slcyber.io | research | CVE-2021-22054 | #vulnerability-research | #vmware | #ssrf | #uem | #cve-2021-22054
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# Encrypting our way to SSRF in VMWare Workspace One UEM (CVE-2021-22054) Get research alerts Share on social ) April 27, 2022 12 min read ### Table of Contents TOC Element Introduction What is...
CVE
CVE-2021-22054
Published
Collected

Related coverage

research · slcyber.io
Advisory: VMWare Workspace One UEM SSRF - CVE-2021-22054
# Advisory: VMWare Workspace One UEM SSRF - CVE-2021-22054 Get research alerts Share on social April 27, 2022 4 min read ### Table of Contents TOC Element Summary Impact Affected Software Product...
vulnerability · slcyber.io
Advisory: VMWare Workspace One Access (CVE-2021-22056)
A post-auth SSRF in VMware Workspace One Access allows stealing administrative JWTs leading to remote code execution.
vulnerability · slcyber.io
Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)
Post-auth SSRF in VMware Workspace ONE Access (CVE-2021-22056) chained to steal admin JWTs and achieve RCE.
vulnerability · horizon3.ai
[CVE-2020-3952] Compromising vCenter via SAML Certificates
A common attack path that Horizon3 has identified across many of its customers is abusing access to the VMware vCenter Identity Provider (IdP) certificate.
vulnerability · horizon3.ai
POC CVE-2021-21972
Write the file supplied in the –file argument to the location specified in the –path argument. The file will be written in the context of the vsphere-ui user.
research · slcyber.io
How practical is 100k requests per second? Introducing h3fuzz
Can HTTP/3 really give you 100k requests per second for content discovery? We tested it in a fork of ffuf and are releasing h3fuzz, a web UI for fuzzing.
Back