CVE-2022-22972 PoC — 多款VMware产品授权问题漏洞

Source

https://github.com/xK0ng/CVE-2022-22972

Associated Vulnerability

Title:多款VMware产品授权问题漏洞 (CVE-2022-22972)
Description:VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.

Description

vmware authentication bypass

Readme

# CVE-2022-22972
vmware authentication bypass

 ```
  -host string
        Auth Servers,(bugs365.com)
  -url string
        Vul url,-url https://xxx.com
  -user string
        username (default "administrator")
 ```
![image](https://user-images.githubusercontent.com/96538641/170842677-a827192c-de39-4c82-911e-3a754b73befc.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!