CVE-2022-22956

This vulnerability lets an attacker skip the “login” step that normally protects VMware Workspace ONE Access. Think of it like a building where the front door guard can be tricked into letting someone in without checking an ID. If the attacker can reach the exposed authentication endpoints, they may then perform actions as if they were trusted.

This matters if you run VMware Workspace ONE Access (including its Identity Manager / related workspace one access components and the Omnissa Workspace ONE Access Connector), because the flaw is in its OAuth2 authentication (ACS) framework. This is a remote, network-based risk and the findings indicate no authentication is required to trigger the bypass.

The risk is highest when the exposed authentication endpoints are reachable from the network (reachability details weren’t confirmed as “default enabled” in the findings, so you should verify your specific exposure).

RED: the findings indicate an attacker can bypass authentication over the network with no authentication required, and public exploit tooling is available. Treat this as an actively exploitable, high-impact auth bypass and prioritize patching and network containment immediately for any reachable installations.