pentester.land· Aug 5, 2022· by Spencer McIntyre (@zeroSteiner)🔍 CVE-2022-31660

CVE-2022-31660 and CVE-2022-31661 (FIXED): VMware Workspace ONE Access, Identity Manager, and vRealize Automation LPE

Target Program: VMware

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Local Privilege Escalation#CVE-2022-31660#CVE-2022-31661