Access Connector vulnerabilities
4 known vulnerabilities in Access Connector from VMware. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
VMware Workspace ONE Access, Access Connector…: Improper Limitation of a Pathname to a Restricted Directory
VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to access arbitrary files.
- 7.2 High severity
VMware Workspace ONE Access, Identity Manager…: Improper Neutralization of Special Elements used in an SQL Command
VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
- 7.2 High severity
VMware Workspace ONE Access, Identity Manager…: Improper Neutralization of Special Elements in Output Used by a Downstream Component
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.
- 9.8 Critical severity
VMware Workspace ONE Access, Identity Manager…: URL Redirection to Untrusted Site
VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authenticated user to an arbitrary domain.