VMware Workspace ONE UEM console 20.0.8 before 20.0.8.37, 20.11.0 before 20.11.0.40, 21.2.0 before 21.2.0.27, and 21.5.0 before 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to UEM to send their requests without authentication and to gain access to sensitive information.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
vmware workspace one uem console |
Get our weekly newsletter Workspace ONE Unified Endpoint Management can leak info via server-side request forgery
VMware customers have probably had a busy week because more than 100 of the IT giant's products are impacted by the Log4j bug. Now they need to make another urgent patching effort, because the virty giant has identified another critical flaw in its products that it rates as requiring urgent attention. Security advisory VMSA-2021-0029, which pertains CVE-2021-22054, describes a server-side forgery request in VMware’s Workspace ONE Unified Endpoint Management (UEM) product. The flaw is rated 9.1...
Vulmon