VMware Workspace One Access / VMware Identity Manager Multiple Vulnerabilities (VMSA-2021-0016)

critical Nessus Plugin ID 152534

Language:

Synopsis

An identity store broker application running on the remote host is affected by a multiple vulnerabilities.

Description

The VMware Workspace One Access (formerly VMware Identity Manager) application running on the remote host is affected by the following vulnerabilities:

- A security bypass vulnerability exists in due to improper validation of host headers. An unauthenticated, remote attacker can exploit this, via a crafted request with custom host headers, to bypass access restrictions to /cfg web app and other diagnostic endpoints. (CVE-2021-22002)

- An information disclosure vulnerability exists in due to a login interface on port 7443. An unauthenticated, remote attacker can exploit this, via brute force, to potentially access the service.
(CVE-2021-22003)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version.

Solution

Apply the HW-137959 hotfix to VMware Workspace One Access / VMware Identity Manager as per the VMSA-2021-0016 advisory.

Plugin Details

Severity: Critical

ID: 152534

File Name: vmware_workspace_one_access_VMSA-2021-0016.nasl

Version: 1.5

Type: remote

Family: CGI abuses

Published: 8/12/2021

Updated: 9/13/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2021-22002

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: x-cpe:/a:vmware:workspace_one_access, cpe:/a:vmware:identity_manager

Required KB Items: installed_sw/VMware Workspace ONE Access

Exploit Ease: No known exploits are available

Patch Publication Date: 8/5/2021

Vulnerability Publication Date: 8/5/2021

Reference Information

CVE: CVE-2021-22002, CVE-2021-22003

IAVA: 2021-A-0370

VMSA: 2021-0016

Detections

Analytics