VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute force the login endpoint, which may or may not be practical based on lockout policy configuration and password complexity for the target account.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
vmware identity_manager 3.3.2 |
||
vmware identity_manager 3.3.3 |
||
vmware identity_manager 3.3.4 |
||
vmware identity_manager 3.3.5 |
||
vmware workspace_one_access 20.01 |
||
vmware workspace_one_access 20.10 |
||
vmware workspace_one_access 20.10.01 |
||
vmware cloud foundation 4.0 |
||
vmware cloud foundation 4.0.1 |
||
vmware cloud foundation 4.1 |
||
vmware cloud foundation 4.1.0.1 |
||
vmware cloud foundation 4.2.1 |
||
vmware vrealize suite lifecycle manager 8.0 |
||
vmware vrealize suite lifecycle manager 8.0.1 |
||
vmware vrealize suite lifecycle manager 8.1 |
||
vmware vrealize suite lifecycle manager 8.2 |
Vulmon