CVE-2022-22960

Statement on CVE-2022-22960 VMware Vulnerabilities

July 15, 2022

Information

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to ‘root’.

Severity

Low

Response

Melissa Data Corporation (“Melissa”) was not impacted by the VMware vulnerabilities as Melissa does not utilize any of the impacted VMware products.

Melissa will continue to follow all guidance provided for this vulnerability as necessary to prevent any future risks.

If you have any additional questions, please contact Melissa’s Compliance department at Compliance@melissa.com.