Unprotected primary channel in VMware Workspace One Access - CVE-2021-22003

Vulnerability identifier: #VU55616

CSH Severity: Low

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-22003

CWE-ID: CWE-419

Exploitation vector: Remote access

Exploit availability: No public exploit available

undefined

VMware Workspace One Access
VMware Identity Manager
Cloud Foundation
Dell Enterprise Hybrid Cloud
vRealize Suite Lifecycle Manager

Install updates from vendor's website.

Dell Enterprise Hybrid Cloud - update to 4.1.2

• https://www.vmware.com/security/advisories/VMSA-2021-0016.html

• Multiple vulnerabilities in VMware Workspace One Access
• Multiple vulnerabilities in VMware Identity Manager (vIDM)
• Multiple vulnerabilities in VMware Cloud Foundation (vIDM)
• Multiple vulnerabilities in vRealize Suite Lifecycle Manager
• Dell EMC Enterprise Hybrid Cloud update for VMware products