CVE-2022-31662: 
Workspace ONE Access Connector vulnerability analysis and mitigation

CVE-2022-31662 is a path traversal vulnerability affecting VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation. The vulnerability was discovered and reported by PetrusViet, a member of VNG Security, and was publicly disclosed on July 31, 2022. VMware has evaluated this vulnerability with a CVSSv3 base score of 5.3, categorizing it as moderate severity (VMware Advisory).

The vulnerability is classified as a path traversal issue that could allow unauthorized file access. It received a CVSSv3 base score of 5.3, indicating moderate severity. The vulnerability affects multiple VMware products running on Linux systems, including VMware Workspace ONE Access (versions 21.08.0.1, 21.08.0.0), Identity Manager (versions 3.3.6, 3.3.5, 3.3.4), and vRealize Automation 7.6 (VMware Advisory).

A malicious actor with network access may be able to access arbitrary files on affected systems. This vulnerability primarily affects the system's confidentiality, allowing unauthorized access to potentially sensitive files (VMware Advisory, Security Online).

The vulnerability requires network access to be exploited, but does not require authentication or user interaction. No evidence of exploitation in the wild has been reported by VMware (VMware Advisory).

VMware has released patches to address this vulnerability. Users are advised to apply the patches listed in the 'Fixed Version' column of the Resolution Matrix, which can be found in VMware's Knowledge Base article KB89096. No workarounds are available for this vulnerability, making patch application the only remediation option (VMware Advisory).