High Threat Security Alert (A22-11-08): Multiple Vulnerabilities in VMware Workspace ONE Assist
09 November 2022
VMware has published a security advisory to address multiple vulnerabilities in VMware Workspace ONE Assist. The list of security updates can be found at: https://www.vmware.com/security/advisories/VMSA-2022-0028.html
Reports indicate that the vulnerability (CVE-2022-31685, CVE-2022-31686 and CVE-2022-31687) is at high risk of exploitation. System administrators are advised to take immediate actions to patch your affected systems to mitigate the elevated risk of cyber attacks.
VMware Workspace ONE Assist
Depending on the vulnerabilities being exploited, a successful exploitation of the vulnerabilities could lead to cross-site scripting, privilege escalation or security restriction bypass on the affected system
The patch for affected product is available. System administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.