CVEs-PoC/2021/CVE-2021-22056.md

### [CVE-2021-22056](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22056)
![](https://img.shields.io/static/v1?label=Product&message=VMware%20Workspace%20ONE%20Access%20and%20Identity%20Manager&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=VMware%20Workspace%20ONE%20Access%2021.08%2C%2020.10.0.1%2C%20and%2020.10%20and%20Identity%20Manager%203.3.5%2C%203.3.4%2C%20and%203.3.3%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=VMware%20Workspace%20Access%20and%20Identity%20Manager%20patches%20SSRF%20vulnerability&color=brightgreen)

### Description

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vulnerability. A malicious actor with network access may be able to make HTTP requests to arbitrary origins and read the full response.

### POC

#### Reference
- https://www.vmware.com/security/advisories/VMSA-2021-0030.html

#### Github
- https://github.com/20142995/nuclei-templates
- https://github.com/ARPSyndicate/cvemon
- https://github.com/cyb3r-w0lf/nuclei-template-collection
- https://github.com/fardeen-ahmed/Bug-bounty-Writeups
- https://github.com/insecrez/Bug-bounty-Writeups
- https://github.com/pen4uin/awesome-vulnerability-research
- https://github.com/pen4uin/vulnerability-research
- https://github.com/pen4uin/vulnerability-research-list