CVE-2022-22954 PoC — VMware 多款产品代码注入漏洞

Source

https://github.com/mumu2020629/-CVE-2022-22954-scanner

Associated Vulnerability

Title: VMware 多款产品代码注入漏洞 (CVE-2022-22954)
Description:VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.

Readme

# CVE-2022-22954-scanner
# 漏洞介绍
VMware Workspace ONE Access（以前称为VMware Identity Manager）旨在通过多因素身份验证、条件访问和单点登录，让您的员工更快地访问SaaS、Web和本机移动应用程序。
# 受影响版本如下：
VMware Workspace ONE Access Appliance （版本号：20.10.0.0 ，20.10.0.1 ，21.08.0.0 ，21.08.0.1 ）
 
VMware Identity Manager Appliance （版本号：3.3.3 ， 3.3.4 ， 3.3.5 ，3.3.6）
 
VMware Realize Automation （版本号：7.6）

![image](https://github.com/mumu2020629/-CVE-2022-22954-scanner/blob/main/demo.png)
![image](https://github.com/mumu2020629/-CVE-2022-22954-scanner/blob/main/scanner.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →