CVE:CVE-2022-22956
CNNVD:CNNVD-202204-2544
Vmware Workspace One Access是美国Vmware公司的将用户身份与设备和网络信息等因素结合起来，为 Workspace One 交付的应用程序制定智能驱动的条件访问决策。
Vmware Workspace One Access存在授权问题漏洞，该漏洞是由于 OAuth2 ACS 框架中存在错误。远程攻击者可以绕过身份验证过程对应用程序进行访问。
solution:Upgrade vmware identity_manager to a higher version than 3.3.3,3.3.4,3.3.5,3.3.6,and avoid the version 3.3.3,3.3.4,3.3.5,3.3.6; Upgrade vmware vrealize_automation to a higher version than 9.0,7.6,and avoid the version [8.0,9.0),7.6; Upgrade vmware workspace_one_access to a higher version than 20.10.0.0,20.10.0.1,21.08.0.0,21.08.0.1,and avoid the version 20.10.0.0,20.10.0.1,21.08.0.0,21.08.0.1