CVE:CVE-2022-22954
CNNVD:CNNVD-202204-2551
Vmware Workspace One Access是美国Vmware公司的将用户身份与设备和网络信息等因素结合起来，为 Workspace One 交付的应用程序制定智能驱动的条件访问决策。
VMware 多款产品存在代码注入漏洞，该漏洞源于不正确的输入验证。远程攻击者利用该漏洞发送特制的HTTP请求并执行服务器端模板注入。
solution:Upgrade vmware identity_manager to a higher version than 3.3.3,3.3.4,3.3.5,3.3.6,and avoid the version 3.3.3,3.3.4,3.3.5,3.3.6; Upgrade vmware vrealize_automation to a higher version than 8.6,7.6,and avoid the version [8.0,8.6],7.6; Upgrade vmware workspace_one_access to a higher version than 20.10.0.0,20.10.0.1,21.08.0.0,21.08.0.1,and avoid the version 20.10.0.0,20.10.0.1,21.08.0.0,21.08.0.1; Upgrade vmware cloud_foundation to a higher version than 4.3.1,and avoid the version [4.0,4.3.1]; Upgrade vmware vrealize_suite_lifecycle_manager to a higher version than 8.2,and avoid the version [8.0,8.2]