High severity · published Aug 31, 2021
CVE-2021-22003
VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443
7.5
CVSS
1%
EPSS
No
On KEV
Description
VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute force the login endpoint, which may or may not be practical based on lockout policy configuration and password complexity for the target account.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WO
Workspace ONE Access · VMware
3.3.2; 3.3.3; 3.3.4; 3.3.5 · source: NVD
CF
Cloud Foundation · Vmware
4.0; 4.0.1; 4.1; 4.1.0.1; 4.2.1 · source: NVD
VS
Vrealize Suite Lifecycle Manager · Vmware
8.0; 8.0.1; 8.1; 8.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-22003
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-22003
Patch
https://www.vmware.com/security/advisories/VMSA-2021-0016.html
More from Workspace ONE Access
9.8
CVE-2022-22954
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
9.1
CVE-2020-4006
Multiple VMware Products Command Injection Vulnerability
7.8
CVE-2022-22960
VMware Multiple Products Privilege Escalation Vulnerability
9.8
CVE-2022-31657
VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability
9.8
CVE-2022-31656
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users