CVE:CVE-2021-22056
CNNVD:CNNVD-202112-1591
Vmware Workspace One Access是美国Vmware公司的将用户身份与设备和网络信息等因素结合起来，为 Workspace One 交付的应用程序制定智能驱动的条件访问决策。
VMware Workspace ONE Access 21.08, 20.10.0.1, 20.10版本和Identity Manager 3.3.5, 3.3.4, 3.3.3版本存在代码问题漏洞，攻击者可利用该漏洞向任意来源发出HTTP请求并读取完整响应。
solution:Upgrade vmware identity_manager to a higher version than 3.3.3,3.3.4,3.3.5,and avoid the version 3.3.3,3.3.4,3.3.5; Upgrade vmware vrealize_automation to a higher version than 8.6,7.6,and avoid the version [8.0,8.6],7.6; Upgrade vmware workspace_one_access to a higher version than 20.10,20.10.01,21.08,21.08.01,and avoid the version 20.10,20.10.01,21.08,21.08.01