CVE-2022-22954

Vulnerability Description

Workspace ONE Access provides a unified application portal through which all enterprise applications can be accessed securely, and can be used for single sign-on. In CVE-2022-22954, an attacker can craft a malicious request to cause template injection, execute arbitrary code, and take control of the server.

Reference Article

https://www.tenable.com/blog/vmware-patches-multiple-vulnerabilities-in-workspace-one-vmsa-2022-0011

Usage Instructions

Batch Scan Mode

python3 CVE-2022-22954.py -m scan -f 123.txt

Command Execution Mode

python3 CVE-2022-22954.py -u https://xxx.xxx.com:8443 -c id