{"vulnerability": "CVE-2021-22056", "sightings": [{"uuid": "143c69f6-55dd-475c-9346-05714960b432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "published-proof-of-concept", "source": "https://t.me/HelixsCrewOfficial/151", "content": "FROM INTERNET\n\n1)DOM XSS through ads\nhttps://hackerone.com/reports/889041\n\n2)IDOR leads to 2fa Bypass\nhttps://medium.com/@arthbajpai277/idor-leads-to-2fa-bypass-3331cec2db64\n\n3)Critical XSS in chrome extension\nhttps://medium.com/@p3rr0x22/critical-xss-in-chrome-extension-b55757a2074\n\n4)Cross Site Port Attack in Wild\nhttps://thehemdeep.medium.com/cross-site-port-attack-in-wild-9d2f6af36455\n\n5)Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)\nhttps://blog.assetnote.io/2022/01/17/workspace-one-access-ssrf/\n\n6)Full SSRF by exporting PDF\nhttps://amakki.me/full-ssrf-by-exporting-pdf-bbe1bfde24c4\n\n7)My Pentest Log -3-\nhttps://hcibo.medium.com/my-pentest-log-3-a0d15eb0de72\n\n8)Day 14, Set Up Environment for Pentesting #100DaysofHacking\nhttps://infosecwriteups.com/day-14-set-up-environment-for-pentesting-100daysofhacking-f8069e91fcd2\n\n9)Jobs in Cybersecurity\nhttps://medium.com/@vijayynot108/jobs-in-cybersecurity-3c609c23ecf6\n\n14)Phishmonger \u2013 Phishing Framework for Pentesters\nhttps://crackcodes.in/2022/01/phishmonger-phishing-framework-for-pentesters/\n\n15)Vulnerability Summary for the Week of January 10, 2022\nhttps://www.cisa.gov/uscert/ncas/bulletins/sb22-017\n\n- Random People", "creation_timestamp": "2022-01-19T02:28:51.000000Z"}, {"uuid": "49bea079-64f0-4a11-b8f7-84e049862dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "seen", "source": "https://t.me/cibsecurity/34316", "content": "\u203c CVE-2021-22056 \u203c\n\nVMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability. A malicious actor with network access may be able to make HTTP requests to arbitrary origins and read the full response.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-21T00:11:45.000000Z"}, {"uuid": "7d389a23-8558-48b4-8633-eef06440d1ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "published-proof-of-concept", "source": "https://t.me/burpsuite/328", "content": "Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)\n\nhttps://blog.assetnote.io/2022/01/17/workspace-one-access-ssrf/", "creation_timestamp": "2022-06-17T01:37:28.000000Z"}, {"uuid": "8b266d95-b592-4d47-954c-92e5f84d3863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/5961", "content": "Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)\n\nhttps://blog.assetnote.io/2022/01/17/workspace-one-access-ssrf/", "creation_timestamp": "2022-01-18T16:20:06.000000Z"}, {"uuid": "021f4634-0aaf-4476-9e84-07ed236f68d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5227", "content": "#Offensive_security\n1. Capturing RDP NetNTLMv2 Hashes:\nAttack details and a Technical How-To Guide\nhttps://www.gosecure.net/blog/2022/01/17/capturing-rdp-netntlmv2-hashes-attack-details-and-a-technical-how-to-guide\n2. Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)\nhttps://blog.assetnote.io/2022/01/17/workspace-one-access-ssrf", "creation_timestamp": "2022-01-18T12:19:43.000000Z"}, {"uuid": "c37413b0-d168-4db3-81bc-e1c4fbea50e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "seen", "source": "Telegram/Zi3FAxs7m__2X8uwFey9GakNknvb0q_3ITvdwPgEG6BywWk", "content": "", "creation_timestamp": "2026-08-16T19:00:04.873679Z"}, {"uuid": "4dd84d04-5770-42a3-8a01-cff3ae14c525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "seen", "source": "https://t.me/burpsuite/66670", "content": "Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)\n\nhttps://blog.assetnote.io/2022/01/17/workspace-one-access-ssrf/", "creation_timestamp": "2026-08-16T19:00:04.921577Z"}, {"uuid": "8ccd20fd-80dc-4409-9e5f-013da8eee174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "published-proof-of-concept", "source": "https://t.me/burpsuite/66670", "content": "Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)\n\nhttps://blog.assetnote.io/2022/01/17/workspace-one-access-ssrf/", "creation_timestamp": "2026-08-17T00:00:10.592881Z"}, {"uuid": "37ef57c2-3557-4b86-baaf-0d99fc11cff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "published-proof-of-concept", "source": "Telegram/Zi3FAxs7m__2X8uwFey9GakNknvb0q_3ITvdwPgEG6BywWk", "content": "", "creation_timestamp": "2026-08-17T00:00:10.641229Z"}, {"uuid": "a6e5185f-1f6e-451a-ad2b-fd07abc29f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "seen", "source": "https://t.me/onelab1337/2091", "content": "#Offensive_security\n1. Capturing RDP NetNTLMv2 Hashes:\nAttack details and a Technical How-To Guide\n\ud83d\udd17 See on Gosecure\n\n2. Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)\n\ud83d\udd17 See on Assetnote\n\nShare and support us \u2764\ufe0f\n@zero0lab", "creation_timestamp": "2026-08-09T05:06:44.457082Z"}, {"uuid": "f7bbdb3a-f470-49bd-9202-9ba125fdd955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "published-proof-of-concept", "source": "https://t.me/onelab1337/2091", "content": "#Offensive_security\n1. Capturing RDP NetNTLMv2 Hashes:\nAttack details and a Technical How-To Guide\n\ud83d\udd17 See on Gosecure\n\n2. Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)\n\ud83d\udd17 See on Assetnote\n\nShare and support us \u2764\ufe0f\n@zero0lab", "creation_timestamp": "2026-08-10T00:00:12.539102Z"}, {"uuid": "392bf587-85f4-4d1c-aa0a-84c38de9a611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "seen", "source": "https://t.me/hacking_Attack/39246", "content": "Black Hat Ethical Hacking\nSSRF vulnerability in VMWare authentication software could allow access to user data\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png SSRF vulnerability in VMWare authentication software could allow access to user dataPost Views: 128 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nA\u00a0server-side request forgery\u00a0(SSRF) vulnerability in versions of VMWare authentication software could allow an attacker to obtain administrative JSON Web Tokens (JWT), researchers warn.\nThe SSRF bug was found in VMware Workspace ONE Access (previously known as Identity Manager), which provides multi-factor authentication, conditional access and single sign-on to SaaS, web, and native mobile apps.\n\nThe vulnerability (tracked as CVE-2021-22056), which was assigned a \u2018moderate\u2019 severity score of 5.5, could enable a malicious actor with network access to make HTTP requests to arbitrary origins and read the full response.\n\nA blog post reads: \u201cDue to the lack of a slash character, it is possible for an attacker to make HTTP requests to arbitrary origins and read the full response.\n\n\u201cFurthermore, an authorization header gets leaked and hence it is possible for an attacker to weaponize this vulnerability to steal the authorization header of an admin upon viewing an image or making a single click.\u201d\nSee Also: Complete Offensive Security and Ethical Hacking Course Access all areasResearchers Shubham Shah and Keiran Sampson, who discovered the bug, said that this could lead to the leaking of JWTs \u2013 potentially allowing a malicious actor full access to a vulnerable system.\n\nJWTs are URL safe strings that are used to identify a user. They contain JSON-encoded data, making them convenient for embedding information.\n\nThey are typically used as session identifiers for web applications, mobile applications, and API services. They also contain user data directly, unlike traditional session identifiers which simply point to user data on the server-side.\n\nIf a user\u2019s JWTs are stolen or compromised, an attacker can potentially gain full access to the user\u2019s account.\n\nMore information about the use of JWTs can be found here.\n\nResearchers pointed out that the leaking of the JWT \u201cincreases the severity of the issue as this vulnerability can be used in spear phishing attacks against organizations\u00a0that use VMWare Workspace One Access\u201d.\n\nShah and Sampson, who discovered the bug, also found a second issue, an authentication bypass vulnerability in VMware Workspace ONE Access (CVE-2021-22057).\n\nThe vulnerability, impacting VMware Verify two factor authentication, was also rated as a moderate severity bug with a score of 6.6.\n\nThe security issue means a malicious actor who has successfully provided the first-factor in an authentication process (such as a password), may be able to obtain second-factor authentication provided by VMware Verify.\n\nA security advisory\u00a0contains further details about which versions of the software are at risk.\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Microsoft: New critical Windows HTTP vulnerability is wormable Patch issuedVMWare has patched both security issues in its latest version of the enterprise software.\n\nIn their blog post, Shah and Sampson thanked the ven[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:59.326053Z"}, {"uuid": "f0648e6b-b917-4f97-ae36-8798a61bacd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "seen", "source": "https://t.me/hacking_Attack/39246", "content": "Black Hat Ethical Hacking\nSSRF vulnerability in VMWare authentication software could allow access to user data\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png SSRF vulnerability in VMWare authentication software could allow access to user dataPost Views: 128 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nA\u00a0server-side request forgery\u00a0(SSRF) vulnerability in versions of VMWare authentication software could allow an attacker to obtain administrative JSON Web Tokens (JWT), researchers warn.\nThe SSRF bug was found in VMware Workspace ONE Access (previously known as Identity Manager), which provides multi-factor authentication, conditional access and single sign-on to SaaS, web, and native mobile apps.\n\nThe vulnerability (tracked as CVE-2021-22056), which was assigned a \u2018moderate\u2019 severity score of 5.5, could enable a malicious actor with network access to make HTTP requests to arbitrary origins and read the full response.\n\nA blog post reads: \u201cDue to the lack of a slash character, it is possible for an attacker to make HTTP requests to arbitrary origins and read the full response.\n\n\u201cFurthermore, an authorization header gets leaked and hence it is possible for an attacker to weaponize this vulnerability to steal the authorization header of an admin upon viewing an image or making a single click.\u201d\nSee Also: Complete Offensive Security and Ethical Hacking Course Access all areasResearchers Shubham Shah and Keiran Sampson, who discovered the bug, said that this could lead to the leaking of JWTs \u2013 potentially allowing a malicious actor full access to a vulnerable system.\n\nJWTs are URL safe strings that are used to identify a user. They contain JSON-encoded data, making them convenient for embedding information.\n\nThey are typically used as session identifiers for web applications, mobile applications, and API services. They also contain user data directly, unlike traditional session identifiers which simply point to user data on the server-side.\n\nIf a user\u2019s JWTs are stolen or compromised, an attacker can potentially gain full access to the user\u2019s account.\n\nMore information about the use of JWTs can be found here.\n\nResearchers pointed out that the leaking of the JWT \u201cincreases the severity of the issue as this vulnerability can be used in spear phishing attacks against organizations\u00a0that use VMWare Workspace One Access\u201d.\n\nShah and Sampson, who discovered the bug, also found a second issue, an authentication bypass vulnerability in VMware Workspace ONE Access (CVE-2021-22057).\n\nThe vulnerability, impacting VMware Verify two factor authentication, was also rated as a moderate severity bug with a score of 6.6.\n\nThe security issue means a malicious actor who has successfully provided the first-factor in an authentication process (such as a password), may be able to obtain second-factor authentication provided by VMware Verify.\n\nA security advisory\u00a0contains further details about which versions of the software are at risk.\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Microsoft: New critical Windows HTTP vulnerability is wormable Patch issuedVMWare has patched both security issues in its latest version of the enterprise software.\n\nIn their blog post, Shah and Sampson thanked the ven[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:21.748909Z"}, {"uuid": "f97851a8-9d11-4c84-ba63-b31c99687876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "seen", "source": "https://t.me/hacking_Attack/39246", "content": "Black Hat Ethical Hacking\nSSRF vulnerability in VMWare authentication software could allow access to user data\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png SSRF vulnerability in VMWare authentication software could allow access to user dataPost Views: 128 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nA\u00a0server-side request forgery\u00a0(SSRF) vulnerability in versions of VMWare authentication software could allow an attacker to obtain administrative JSON Web Tokens (JWT), researchers warn.\nThe SSRF bug was found in VMware Workspace ONE Access (previously known as Identity Manager), which provides multi-factor authentication, conditional access and single sign-on to SaaS, web, and native mobile apps.\n\nThe vulnerability (tracked as CVE-2021-22056), which was assigned a \u2018moderate\u2019 severity score of 5.5, could enable a malicious actor with network access to make HTTP requests to arbitrary origins and read the full response.\n\nA blog post reads: \u201cDue to the lack of a slash character, it is possible for an attacker to make HTTP requests to arbitrary origins and read the full response.\n\n\u201cFurthermore, an authorization header gets leaked and hence it is possible for an attacker to weaponize this vulnerability to steal the authorization header of an admin upon viewing an image or making a single click.\u201d\nSee Also: Complete Offensive Security and Ethical Hacking Course Access all areasResearchers Shubham Shah and Keiran Sampson, who discovered the bug, said that this could lead to the leaking of JWTs \u2013 potentially allowing a malicious actor full access to a vulnerable system.\n\nJWTs are URL safe strings that are used to identify a user. They contain JSON-encoded data, making them convenient for embedding information.\n\nThey are typically used as session identifiers for web applications, mobile applications, and API services. They also contain user data directly, unlike traditional session identifiers which simply point to user data on the server-side.\n\nIf a user\u2019s JWTs are stolen or compromised, an attacker can potentially gain full access to the user\u2019s account.\n\nMore information about the use of JWTs can be found here.\n\nResearchers pointed out that the leaking of the JWT \u201cincreases the severity of the issue as this vulnerability can be used in spear phishing attacks against organizations\u00a0that use VMWare Workspace One Access\u201d.\n\nShah and Sampson, who discovered the bug, also found a second issue, an authentication bypass vulnerability in VMware Workspace ONE Access (CVE-2021-22057).\n\nThe vulnerability, impacting VMware Verify two factor authentication, was also rated as a moderate severity bug with a score of 6.6.\n\nThe security issue means a malicious actor who has successfully provided the first-factor in an authentication process (such as a password), may be able to obtain second-factor authentication provided by VMware Verify.\n\nA security advisory\u00a0contains further details about which versions of the software are at risk.\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Microsoft: New critical Windows HTTP vulnerability is wormable Patch issuedVMWare has patched both security issues in its latest version of the enterprise software.\n\nIn their blog post, Shah and Sampson thanked the ven[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T13:00:05.320333Z"}, {"uuid": "6584eb18-9d48-4847-9a60-f2c8b20605cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22056", "type": "seen", "source": "https://t.me/hacking_Attack/39246", "content": "Black Hat Ethical Hacking\nSSRF vulnerability in VMWare authentication software could allow access to user data\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png SSRF vulnerability in VMWare authentication software could allow access to user dataPost Views: 128 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nA\u00a0server-side request forgery\u00a0(SSRF) vulnerability in versions of VMWare authentication software could allow an attacker to obtain administrative JSON Web Tokens (JWT), researchers warn.\nThe SSRF bug was found in VMware Workspace ONE Access (previously known as Identity Manager), which provides multi-factor authentication, conditional access and single sign-on to SaaS, web, and native mobile apps.\n\nThe vulnerability (tracked as CVE-2021-22056), which was assigned a \u2018moderate\u2019 severity score of 5.5, could enable a malicious actor with network access to make HTTP requests to arbitrary origins and read the full response.\n\nA blog post reads: \u201cDue to the lack of a slash character, it is possible for an attacker to make HTTP requests to arbitrary origins and read the full response.\n\n\u201cFurthermore, an authorization header gets leaked and hence it is possible for an attacker to weaponize this vulnerability to steal the authorization header of an admin upon viewing an image or making a single click.\u201d\nSee Also: Complete Offensive Security and Ethical Hacking Course Access all areasResearchers Shubham Shah and Keiran Sampson, who discovered the bug, said that this could lead to the leaking of JWTs \u2013 potentially allowing a malicious actor full access to a vulnerable system.\n\nJWTs are URL safe strings that are used to identify a user. They contain JSON-encoded data, making them convenient for embedding information.\n\nThey are typically used as session identifiers for web applications, mobile applications, and API services. They also contain user data directly, unlike traditional session identifiers which simply point to user data on the server-side.\n\nIf a user\u2019s JWTs are stolen or compromised, an attacker can potentially gain full access to the user\u2019s account.\n\nMore information about the use of JWTs can be found here.\n\nResearchers pointed out that the leaking of the JWT \u201cincreases the severity of the issue as this vulnerability can be used in spear phishing attacks against organizations\u00a0that use VMWare Workspace One Access\u201d.\n\nShah and Sampson, who discovered the bug, also found a second issue, an authentication bypass vulnerability in VMware Workspace ONE Access (CVE-2021-22057).\n\nThe vulnerability, impacting VMware Verify two factor authentication, was also rated as a moderate severity bug with a score of 6.6.\n\nThe security issue means a malicious actor who has successfully provided the first-factor in an authentication process (such as a password), may be able to obtain second-factor authentication provided by VMware Verify.\n\nA security advisory\u00a0contains further details about which versions of the software are at risk.\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Microsoft: New critical Windows HTTP vulnerability is wormable Patch issuedVMWare has patched both security issues in its latest version of the enterprise software.\n\nIn their blog post, Shah and Sampson thanked the ven[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:14.440481Z"}]}