{"uuid": "c9d6beef-da8f-4066-8e9d-bcdd4aedbca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-22960", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmware_workspace_one_access_cve_2022_22960.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"cmd, x64\", \"author\": [\"mr_me\", \"jheysel-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits CVE-2022-22960 which allows the user to overwrite the permissions of the\\n            certproxyService.sh script so that it can be modified by the horizon user. This allows a local attacker with\\n            the uid 1001 to escalate their privileges to root access.\", \"disclosure_date\": \"2022-04-06\", \"fullname\": \"exploit/linux/local/vmware_workspace_one_access_cve_2022_22960\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:34 +0000\", \"name\": \"VMware Workspace ONE Access CVE-2022-22960\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/local/vmware_workspace_one_access_cve_2022_22960.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"linux/local/vmware_workspace_one_access_cve_2022_22960\", \"references\": [\"CVE-2022-22960\", \"URL-https://srcincite.io/blog/2022/08/11/i-am-whoever-i-say-i-am-infiltrating-vmware-workspace-one-access-using-a-0-click-exploit.html#dbconnectioncheckcontroller-dbcheck-jdbc-injection-remote-code-execution\", \"URL-https://github.com/sourceincite/hekate/\", \"URL-https://www.vmware.com/security/advisories/VMSA-2022-0011.html\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:14.230664Z"}