[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fz1sm4LyX5y9K4AHuVOR0Yha3TAGNHFEz2A2GEehgSI0":3,"g5a-risk:CVE-2021-22002":197},{"success":4,"data":5,"meta":195},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":101,"references":102,"referencesCount":109,"weaknesses":110,"weaknessesCount":109,"isActivelyExploited":119,"cisaInfo":27,"otxData":27,"relatedBlogPosts":120,"seoMetadata":121,"configurations":146,"relatedVendorCves":193,"notableEvents":194},"CVE-2021-22002","What is CVE-2021-22002?","VMware Workspace ONE Access and Identity Manager, allow the \u002Fcfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network access to port 443 could tamper with host headers to facilitate access to the \u002Fcfg web app, in addition a malicious actor could access \u002Fcfg diagnostic endpoints without authentication.","VMware Workspace ONE Access and Identity Manager, allow the \u002Fcfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom h...","2021-08-31T22:15:08.32","2021-09-09T13:58:28.36",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01207,[39,39,39,39,39,39,39],"Critical",[43,48,51,54,57,61,64,67,72,76,79,82,85,88,92,95,98],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"vmware","identity_manager","3.3.2","cpe:2.3:a:vmware:identity_manager:3.3.2:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"3.3.3","cpe:2.3:a:vmware:identity_manager:3.3.3:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"3.3.4","cpe:2.3:a:vmware:identity_manager:3.3.4:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":55,"criteria":56,"vulnerable":4},"3.3.5","cpe:2.3:a:vmware:identity_manager:3.3.5:*:*:*:*:*:*:*",{"vendor":44,"product":58,"version":59,"criteria":60,"vulnerable":4},"workspace_one_access","20.01","cpe:2.3:a:vmware:workspace_one_access:20.01:*:*:*:*:*:*:*",{"vendor":44,"product":58,"version":62,"criteria":63,"vulnerable":4},"20.10","cpe:2.3:a:vmware:workspace_one_access:20.10:*:*:*:*:*:*:*",{"vendor":44,"product":58,"version":65,"criteria":66,"vulnerable":4},"20.10.01","cpe:2.3:a:vmware:workspace_one_access:20.10.01:*:*:*:*:*:*:*",{"vendor":68,"product":69,"version":70,"criteria":71,"vulnerable":4},"linux","linux_kernel","-","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",{"vendor":44,"product":73,"version":74,"criteria":75,"vulnerable":4},"cloud_foundation","4.0","cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:*",{"vendor":44,"product":73,"version":77,"criteria":78,"vulnerable":4},"4.0.1","cpe:2.3:a:vmware:cloud_foundation:4.0.1:*:*:*:*:*:*:*",{"vendor":44,"product":73,"version":80,"criteria":81,"vulnerable":4},"4.1","cpe:2.3:a:vmware:cloud_foundation:4.1:*:*:*:*:*:*:*",{"vendor":44,"product":73,"version":83,"criteria":84,"vulnerable":4},"4.1.0.1","cpe:2.3:a:vmware:cloud_foundation:4.1.0.1:*:*:*:*:*:*:*",{"vendor":44,"product":73,"version":86,"criteria":87,"vulnerable":4},"4.2.1","cpe:2.3:a:vmware:cloud_foundation:4.2.1:*:*:*:*:*:*:*",{"vendor":44,"product":89,"version":90,"criteria":91,"vulnerable":4},"vrealize_suite_lifecycle_manager","8.0","cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0:*:*:*:*:*:*:*",{"vendor":44,"product":89,"version":93,"criteria":94,"vulnerable":4},"8.0.1","cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0.1:*:*:*:*:*:*:*",{"vendor":44,"product":89,"version":96,"criteria":97,"vulnerable":4},"8.1","cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.1:*:*:*:*:*:*:*",{"vendor":44,"product":89,"version":99,"criteria":100,"vulnerable":4},"8.2","cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:*:*:*:*:*:*:*",17,[103],{"url":104,"source":105,"tags":106},"https:\u002F\u002Fwww.vmware.com\u002Fsecurity\u002Fadvisories\u002FVMSA-2021-0016.html","Vmware",[107,108],"Patch","Vendor Advisory",1,[111],{"id":112,"name":113,"description":114,"extendedDescription":115,"status":116,"abstraction":117,"structure":118},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":122,"metaDescription":123,"keywords":124,"canonicalUrl":125,"structuredData":126},"What is CVE-2021-22002? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-22002, a critical severity cyber security vulnerability from 2021. VMware Workspace ONE Access and Identity Manager, allow...","CVE-2021-22002, CVE-2021-22002 vulnerability, CVE-2021-22002 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, vmware security, linux security, identity_manager vulnerability, workspace_one_access vulnerability, linux_kernel vulnerability, cloud_foundation vulnerability","\u002Fwhat-is\u002Fcve-2021-22002",{"@context":127,"@type":128,"headline":122,"description":123,"datePublished":10,"dateModified":11,"author":129,"publisher":133,"about":137,"mainEntityOfPage":141,"articleSection":144,"keywords":145},"https:\u002F\u002Fschema.org","TechArticle",{"@type":130,"name":131,"url":132},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":130,"name":131,"url":132,"logo":134},{"@type":135,"url":136},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":138,"name":6,"description":139,"additionalType":140},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":142,"@id":143},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-22002","Cybersecurity","CVE-2021-22002, CVE-2021-22002 vulnerability, CVE-2021-22002 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[147,171],{"Operator":148,"Negate":27,"Nodes":149},"AND",[150,167],{"Operator":151,"Negate":27,"CPEMatch":152},"OR",[153,155,157,159,161,163,165],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":154,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"22BC2D96-5922-4995-B006-1BAB5FE51D93",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":156,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"97D98937-489B-4AA5-B99E-9AB639C582CA",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":158,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0E93CB5E-CB4A-474A-9901-2E098928C489",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":160,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2A215A7D-F644-41DE-AB4E-69145DA48F9F",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FFFD453B-7658-4FDA-BA4D-B13681F51724",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":164,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EDC57F3A-E726-4EE5-924D-9C94FED4718D",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":166,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6C2F7CB4-8425-4D9F-97FC-AD96D9ABC202",{"Operator":151,"Negate":27,"CPEMatch":168},[169],{"Vulnerable":27,"Criteria":71,"MatchCriteriaID":170,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",{"Operator":27,"Negate":27,"Nodes":172},[173],{"Operator":151,"Negate":27,"CPEMatch":174},[175,177,179,181,183,185,187,189,191],{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":176,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"38EB0C0C-56CF-4A8F-A36F-E0E180B9059E",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":178,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A54544F5-5929-4609-A91C-FCA0FDBFE862",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":180,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CA6D6348-E71A-4DA4-AC84-51397B2461A2",{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":182,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C8EC0B43-8667-45D6-BF97-03DDFFAD2AF9",{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":184,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DC4C5700-1AFE-49F6-AC92-09F2349345ED",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":186,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E3318D91-40AC-4649-8FCD-4557C8F934B9",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":188,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A06C29AB-1EAF-43EF-96C3-9E3468911B2F",{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":190,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"43723EC2-295E-4AF7-B654-70F9E42F4807",{"Vulnerable":4,"Criteria":100,"MatchCriteriaID":192,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CFB84C30-EE5D-4C15-A74E-7B2B3E0DED4D",[],[],{"lastModified":11,"cacheTime":196,"version":33},1792356188503,{"score":198,"band":199,"action":200,"scoredAt":201},54,"Medium","Plan remediation","2026-10-16T06:51:58.549486+00:00"]