VMware Workspace ONE Assist vulnerabilities
We track 4 vulnerabilities in VMware Workspace ONE Assist products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2022.
Latest VMware Workspace ONE Assist vulnerabilities
- 9.8 Critical severity
VMware Workspace ONE Assist: Session Fixation
VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious actor who obtains a valid session token may be able to authenticate to the application using that token.
- 9.8 Critical severity
VMware Workspace ONE Assist: Improper Access Control
VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
- 9.8 Critical severity
VMware Workspace ONE Assist: Improper Authentication
VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.
- 9.8 Critical severity
VMware Workspace ONE Assist: Improper Authentication
VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with network access to Workspace ONE Assist may be able to obtain administrative access without the need to authenticate to the application.