CVE-2022-22972 PoC — 多款VMware产品授权问题漏洞

Source

https://github.com/bengisugun/CVE-2022-22972-

Associated Vulnerability

Title:多款VMware产品授权问题漏洞 (CVE-2022-22972)
Description:VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access without the need to authenticate.

Description

IOC List

Readme

# CVE-2022-22972-IOC List

# IP ADRESSES
•	23.36.163.250

•	64.32.6.143	

•	217.175.49.100	


# HASH
•	6f17c8af555321cca16fe1695cc420eb9079fd187b8fa71d840f3cfd1f796117	

•	040db8eacbd482c12ba03ab1a7c738be	

•	97ac734b671c815c43ea3287732046d2177e5bdad63e12315acc4902b8baa04d	

•	0504b67a506ab4b537725084eb6c26f4c1ceeb3349e7c84da8974bec7bde47e1

•	821f53ec249dea978a1122d0951792ded91c1ad4fa163be77c9182c3b7bbc872

•	8658dcad983dacbb3bca7bc8217fd0b75f28df85bf9259bd0dccf69e58cb0ecd

•	40115a6f33ccd15218dea1d28bebe11a0204c7e7a7b61aaf827d7f521bb38742	

•	5895763cf14b4204f372720288a12874	

•	b6d2f704934445acf4b596c0f6e8041c3396e93200f34e18bc2d098d66017cd5	

•	cd6f4900abc2da200ad96c75852facfd8872610ce9dd259acf3cc82507490dd3



# DOMAİN
•	horizon3.ai	

•	csirt.gov.it	

•	attackerkb.com	

•	avatars.githubusercontent.com	

•	nosec.org	

•	starchart.cc	

•	suricata.io	

•	2022-05-29.md	

•	cisa.gov	

•	args.host

•	assetnote.io	

•	digest-2022-05.md	

•	88.com	

•	2022-05-28.md	

•	fwhl.com	

•	2022-05-28_short.md	

•	2022-05-31-f75820b9-b2c6-4e41-9f17-fb23f1b03047.md	

•	2022-05.md	

•	darknetlive.com	

•	dayzerosec.com

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!