VMSA-2021-0029

Critical

Advisory ID: VMSA-2021-0029

CVSSv3 Range: 9.1

Issue Date: 2021-12-16

Updated On: 2021-12-16 (Initial Advisory)

CVE(s): CVE-2021-22054

Synopsis: VMware Workspace ONE UEM console patches address SSRF vulnerability (CVE-2021-22054)

1. Impacted Products

VMware Workspace ONE UEM console

2. Introduction

A Server Side Request Forgery (SSRF) vulnerability in VMware Workspace ONE UEM console was privately reported to VMware. Patches and workarounds are available to address this vulnerability in affected VMware products. The issue has been mitigated for VMware-hosted Workspace ONE consoles.

3. Advisory Details

Description

VMware Workspace ONE UEM console contains a Server Side Request Forgery (SSRF) vulnerability. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.1.

Known Attack Vectors

A malicious actor with network access to UEM can send their requests without authentication and may exploit this issue to gain access to sensitive information.

Resolution

Fixes for CVE-2021-22054 are documented in the 'Fixed Version' column of the 'Response Matrix' below.

Workarounds

Workarounds for CVE-2021-22054 are documented in the 'Workarounds' column of the 'Response Matrix' below.

Additional Documentation

None.

Notes

None.

Acknowledgements

VMware would like to thank Shubham Shah and James Hebden, of Assetnote, and Keiran Sampson for reporting this issue to us.

Response Matrix

Product	Version	Running On	CVE Identifier	CVSSv3	Severity	Fixed Version	Workarounds	Additional Documentation
VMware Workspace ONE UEM console	2105	Any	CVE-2021-22054	9.1	critical	21.5.0.37	KB87167	None
VMware Workspace ONE UEM console	2102	Any	CVE-2021-22054	9.1	critical	21.2.0.27	KB87167	None
VMware Workspace ONE UEM console	2011	Any	CVE-2021-22054	9.1	critical	20.11.0.40	KB87167	None
VMware Workspace ONE UEM console	2008	Any	CVE-2021-22054	9.1	critical	20.0.8.36	KB87167	None