CVE-2022-31664: 
Workspace ONE Access Connector vulnerability analysis and mitigation

CVE-2022-31664 is a privilege escalation vulnerability affecting VMware Workspace ONE Access, Identity Manager, and vRealize Automation. The vulnerability was discovered by Steven Seeley (mr_me) of Qihoo 360 Vulnerability Research Institute and was disclosed on July 31, 2022. VMware has evaluated this vulnerability with a CVSSv3 base score of 7.8, categorizing it in the Important severity range (VMware Advisory).

The vulnerability allows privilege escalation on Linux-based systems running affected VMware products. It has been assigned a CVSSv3 base score of 7.8, indicating a significant security risk. The vulnerability affects multiple versions of VMware products including Workspace ONE Access (versions 21.08.0.1, 21.08.0.0), Identity Manager (versions 3.3.6, 3.3.5, 3.3.4), and vRealize Automation 7.6 (VMware Advisory).

When exploited, this vulnerability allows a malicious actor with local access to escalate privileges to 'root' level on the affected systems. This level of access gives attackers complete control over the compromised system, potentially leading to severe security breaches (VMware Advisory).

The vulnerability requires local access to the system for exploitation. A malicious actor must first gain local access to the affected system before they can attempt to escalate privileges to root level (VMware Advisory, Hacker News).

VMware has released patches to address this vulnerability. Users are advised to apply the patches listed in the 'Fixed Version' column of the Resolution Matrix in VMware's security advisory. The patches are available through VMware's Knowledge Base article KB89096. No workarounds are available for this vulnerability, making patch application the only remediation option (VMware Advisory).